Hash Generator
Compute MD5, SHA-1, SHA-256, SHA-384 and SHA-512 digests of any text.
Hash
Private by design. Hashing runs in your browser through the Web Crypto API. Input never leaves the page — but do not paste real production passwords into any website.
How to use the Hash Generator
- Type or paste the text to hash.
- Read MD5, SHA-1, SHA-256, SHA-384 and SHA-512 side by side — all of them update as you type.
- Copy the digest you need.
- To verify a download, paste the vendor-published sum and compare it against yours.
A worked example
hello
SHA-256 · 2cf24dba5fb0a30e26e83b2ac5b9e29e1b161e5c1fa7425e73043362938b9824
MD5 of the same string is 5d41402abc4b2a76b9719d911017c592. Both are correct; only one of them is still safe against an attacker who controls the input.
Frequently asked questions
What is a hash generator used for?
Verifying that a download or message was not altered, deduplicating content by digest, and generating cache keys. The digest acts as a compact fingerprint of the input.
Can I reverse an MD5 or SHA-256 hash?
No. Hashing is one-way by design. So-called reverse lookups only work by comparing against a table of already-known inputs such as common passwords.
Which algorithm should I choose?
SHA-256 for anything new. Use MD5 or SHA-1 only when an existing system requires that exact format, never for security decisions.
Is my input sent to a server?
No. SHA digests are computed with the browser Web Crypto API and MD5 with a local JavaScript implementation. There is no network request.
About the Hash Generator
A cryptographic hash maps input of any length to a fixed-length digest. The same input always yields the same digest, and a one-character change produces a completely different one, which is why hashes are used for integrity checks and content addressing.
SHA-256 and above come from the browser Web Crypto API. MD5 is included because file checksums and legacy systems still emit it, but it has been broken for collision resistance since 2004 and SHA-1 since 2017 — neither should be used for signatures or certificates.
Hashes are one-way. There is no decode function; sites claiming to reverse a hash are searching a precomputed table of common inputs.
Maintained by Ikonode. Last checked against the code on 11 September 2026.
What it does not do
- Text only. Hashing a file means reading its bytes, which this tool does not do.
- MD5 and SHA-1 are broken for collision resistance. Use them to match an existing system, never for signatures or certificates.
- Never for passwords. Fast hashes are the wrong tool — password storage needs Argon2id, bcrypt or scrypt.