About Hash Generator (MD5/SHA)
Hash Generator computes MD5, SHA-1, SHA-256, SHA-384, and SHA-512 hashes from any text, entirely in your browser. A hash function takes input of any length and produces a fixed-length fingerprint of it — the same input always produces the same hash, and even a one-character change produces a completely different one. This makes hashes useful for checksums, verifying file integrity, and comparing values without storing the original text. SHA-1/256/384/512 run through the browser's built-in Web Crypto API; MD5 is implemented directly per RFC 1321, since Web Crypto doesn't expose it. Nothing you paste is uploaded, logged, or stored anywhere.
How to use it
- 1
Paste your text
Paste any text into the input pane.
- 2
Click Generate
All five hashes — MD5, SHA-1, SHA-256, SHA-384, and SHA-512 — are computed at once and listed in the output pane.
- 3
Copy the result
Click Copy to copy the full list of hashes to your clipboard.
What it does
- Computes MD5, SHA-1, SHA-256, SHA-384, and SHA-512 hashes of UTF-8 text
- Uses the browser's native Web Crypto API for SHA-1/256/384/512
- Implements MD5 directly, since it isn't available through Web Crypto
- Outputs each hash as a lowercase hex string, one per line
FAQ
Which hash algorithm should I use?
For anything security-sensitive (passwords, signatures, integrity checks against tampering), use SHA-256 or stronger — MD5 and SHA-1 are both cryptographically broken and shouldn't be relied on where collision resistance matters. MD5 and SHA-1 are still commonly seen for legacy checksums and matching hashes against older systems, which is why they're included here.
Why is MD5 still considered insecure?
Researchers have demonstrated practical collision attacks against MD5 (two different inputs producing the same hash), which breaks the guarantees needed for signatures and integrity verification. It's fine for non-adversarial use like deduplication or checksums, but not for anything where someone might deliberately try to fake a match.
Will hashing the same text twice give the same result?
Yes. Every algorithm here is deterministic — identical input always produces an identical hash. If you need different output each time (e.g. for password storage), you need a salted or key-derivation scheme, not a raw hash.
Does this tool send my data anywhere?
No. All five hashes are computed locally in your browser — four through the built-in Web Crypto API, and MD5 through a local implementation. Your input is never sent over the network.