A hash function takes any input and produces a fixed-length fingerprint — change a single byte of the input and the hash changes completely. Hashes are how downloads are verified, how git identifies commits, how systems detect duplicate files, and (with the right algorithms) how passwords are stored.
This tool computes MD5, SHA-1, SHA-256 and SHA-512 hashes of any text directly in your browser using the Web Crypto API. It is ideal for verifying file checksums published by software vendors, generating cache keys, or comparing whether two pieces of text are identical without reading them.
How to Use This Tool
- Type or paste the text to hash.
- All four hashes (MD5, SHA-1, SHA-256, SHA-512) are computed instantly.
- Click any hash to copy it.
- To verify a download, compare the published checksum with the hash of your copy — they must match exactly.
Frequently Asked Questions
Can a hash be reversed to reveal the original text?
No — hashing is one-way by design. However, attackers can precompute hashes of common inputs (rainbow tables), which is why short or common passwords are crackable even when hashed. Long, unique inputs are practically impossible to recover.
Is MD5 still safe to use?
MD5 is broken for security purposes — collisions can be manufactured — so never use it for passwords or signatures. It remains acceptable for non-security tasks like detecting accidental file corruption or deduplicating data.
Which hash should I use today?
SHA-256 is the standard general-purpose choice: fast, widely supported, and collision-resistant. For password storage specifically, use a deliberately slow algorithm like bcrypt or Argon2 instead of any plain hash.