Hash Generator
Generate MD5, SHA-1, SHA-256, SHA-384 and SHA-512 hashes from any text or file, all at once.
Drag & drop any file here, or click to browse
No uploads. Your file is read and hashed on your device.
Nothing to hash yet.
- MD5
— - SHA-1
— - SHA-256
— - SHA-384
— - SHA-512
—
How it works
Type or paste text and you instantly get all five digests at once — MD5, SHA-1, SHA-256,
SHA-384 and SHA-512 — so you never have to pick the algorithm first. Switch to
File to compute the checksum of a download, an ISO or an archive: the file is
read straight from disk with the FileReader API and hashed in place. The SHA family is computed
with the browser's built-in Web Crypto (crypto.subtle.digest); MD5 is not part of
Web Crypto, so it is computed by a small JavaScript implementation of RFC 1321 that runs in the
same page.
Text is hashed as UTF-8 bytes, which is what command-line tools like md5sum,
sha256sum and certutil do — so the hex string here matches theirs
exactly. Paste a published checksum into Verify a checksum and the tool tells you
which algorithm it matches, with case and stray spaces ignored. Nothing is uploaded: no
request leaves your browser, so it is safe for passwords, API keys, contracts and private
files. Remember that MD5 and SHA-1 are broken for security purposes — use them only for
integrity checks and legacy systems, and prefer SHA-256 or SHA-512 for anything that matters.
Frequently asked questions
How do I generate an MD5 hash from text?
Paste your text into the box and the MD5 hash appears instantly, alongside SHA-1, SHA-256, SHA-384 and SHA-512. The text is hashed as UTF-8 bytes, exactly like md5sum on Linux, certutil -hashfile on Windows or md5 on macOS, so the 32-character hex string here matches what those tools print. Hit Copy MD5 to put just that digest on your clipboard, or tick Uppercase hex if the system you are pasting into expects capitals.
What is the difference between MD5 and SHA-256?
MD5 produces a 128-bit (32 hex character) digest and SHA-256 produces a 256-bit (64 hex character) one. More importantly, MD5 and SHA-1 are cryptographically broken: attackers can craft two different inputs with the same hash, so they must not be used for signatures, passwords or anything security-critical. They are still fine for non-adversarial integrity checks and legacy systems. For anything that matters, use SHA-256 or SHA-512 — and for passwords use a dedicated password hash like bcrypt or Argon2 rather than a plain digest.
Is it safe to generate hashes online?
With this tool, yes — nothing you type or drop is uploaded. The SHA digests are computed by your browser's built-in Web Crypto API and MD5 by a small JavaScript implementation bundled with the page, so no network request is made and there is no server that could log your input. That makes it safe for API keys, contracts and private files. Many other online hash generators post your text to a backend, so check before pasting anything sensitive elsewhere.