How to use the hash generator
- Type or paste text.
- All hashes update as you type.
- Copy the one you need.
About this tool
Type or paste text and all common hashes update as you type. SHA-256 and SHA-512 are suitable for integrity checks. MD5 and SHA-1 still appear in legacy checksums but should not be used for security. For storing passwords use bcrypt or Argon2 instead.
Example: the hash of "abc"
| Algorithm | Length | Hash |
|---|---|---|
| MD5 | 32 hex | 900150983cd24fb0d6963f7d28e17f72 |
| SHA-1 | 40 hex | a9993e364706816aba3e25717850c26c9cd0d89d |
| SHA-256 | 64 hex | ba7816bf8f01cfea414140de5dae2223b00361a396177a9cb410ff61f20015ad |
SHA-384 gives 96 hex characters and SHA-512 gives 128. The same input always gives the same hash, and changing even one character gives a completely different result.
Which algorithm should you use?
- SHA-256 or SHA-512 for integrity checks and most modern uses.
- MD5 and SHA-1 only for old checksums and compatibility. Both are broken for security, since collisions can be created deliberately.
- Never a plain hash for storing passwords. Use a slow, salted algorithm such as bcrypt, scrypt or Argon2.
Checking a downloaded file
This page hashes the text you type, not files. To check a file against the checksum published on a download page, use your operating system: certutil -hashfile file.zip SHA256 on Windows, or shasum -a 256 file.zip on macOS and Linux. Then compare the result with the published value character by character.
Why your hash does not match
The usual cause is a hidden difference in the input. A trailing newline changes the hash completely, so "abc" and "abc" followed by a line break give different results. Different text encodings matter too, and this tool encodes text as UTF-8. Also remember that a hash is not the same as an HMAC, which mixes in a secret key.
Frequently asked questions
Which hash should I use?
SHA-256 for checksums and integrity. MD5 and SHA-1 are broken for security use. For passwords use a slow hash like bcrypt or Argon2, not these.
Can a hash be reversed?
No. Hashing is one way, though weak or common inputs can be guessed with lookup tables.
Is my text uploaded?
No. Everything runs in your browser. Nothing is uploaded.
Can a hash be decoded back to the text?
No. Hashing is one-way. Short or common inputs can be found by guessing and looking up tables, which is why passwords need salted slow hashes.
Is the text I type sent anywhere?
No. All hashes are calculated in your browser.