Hash Generator
A hash function turns input of any length into a fixed-length fingerprint called a digest. Change a single character and the digest changes completely, which makes hashes useful for checking that two pieces of data are identical without comparing them byte by byte.
Enter or paste text and this tool shows its MD5, SHA-1, SHA-256 and SHA-512 digests together, in lowercase hexadecimal, each with its own copy button. It hashes text only. There is no file upload, so it cannot produce the checksum of a file you downloaded.
Runs in your browser. Hash Generator processes your input on your own device. Nothing you enter or upload is sent to a server.
Did this tool help you? ☕
WebzTools is free to use. If this tool saved you some time, you can support the project with a coffee and help us keep improving the tools.
(opens in a new tab)How to use the Hash Generator
- Type or paste the text into the box.
- Select Generate Hashes. The digests do not update as you type.
- Read the four digests: MD5, SHA-1, SHA-256 and SHA-512.
- Copy one with its own button, or use Copy All.
Supported formats: Text input only. Output is lowercase hexadecimal for each of MD5, SHA-1, SHA-256 and SHA-512.
Choosing an algorithm
| Algorithm | Digest length | Where it stands |
|---|---|---|
| MD5 | 128 bits (32 hex characters) | Broken for security: collisions can be produced deliberately. Still fine for spotting accidental changes or matching a legacy checksum. |
| SHA-1 | 160 bits (40 hex characters) | Practical collision attacks exist. Keep it for compatibility with older systems, not for new security work. |
| SHA-256 | 256 bits (64 hex characters) | The usual default for new work. Part of the SHA-2 family. |
| SHA-512 | 512 bits (128 hex characters) | A longer SHA-2 digest, for when a format or protocol asks for it. |
Why your hash may not match another tool's
A hash covers the exact bytes of the input. The text you enter is encoded as UTF-8 before it is hashed, and every space, capital letter and line break counts. The most common cause of a mismatch is a trailing newline or space that one tool included and the other did not.
SHA-256 of the five letters hello
Input
hello
Output
2cf24dba5fb0a30e26e83b2ac5b9e29e1b161e5c1fa7425e73043362938b9824
SHA-256 of hello followed by one line break
Input
hello
Output
5891b5b522d5df086d0ff0b110fbd9d21bb4fc7163af34d08286a2e846f6be03
Hashing is not encryption or encoding
Encryption is reversible by anyone holding the key. A hash has no key and is not designed to be reversed: you cannot get the original text back from a digest. Encoding is different again. Base64 encoding only rewrites data in another alphabet, and anyone can undo it.
A hash of a short or common input can still be found by looking it up in a precomputed table, so do not treat a plain hash as protection for a password.
Things worth knowing
- MD5 and SHA-1 are not collision-resistant and must not be relied on for security.
- A general-purpose hash is the wrong tool for storing passwords.
- Only these four algorithms are offered. There is no HMAC, salt option, SHA-384 or SHA-3.
Frequently asked questions
Which algorithm should I use?
SHA-256 for anything where security matters. MD5 and SHA-1 are both broken for security purposes, because practical collision attacks exist against them, and should only be used for non-adversarial checks such as detecting accidental corruption or matching an existing checksum.
Can a hash be reversed?
Not by inverting the function. But short or common inputs can be recovered by looking them up in precomputed tables, which is why password storage uses slow, salted algorithms designed for the job rather than a plain hash.
Can I hash a file or check a download's checksum?
No. This tool only hashes text typed or pasted into the box. Pasting a file's contents will not give you the file's checksum, because a file is raw bytes rather than the text your editor shows.
Is my input sent anywhere?
No. The digests are computed in your browser, and the text is not sent to a server.