Skip to content
DevTools

Hash Generator

text → digest

Hash text with MD5, SHA-1, SHA-256, SHA-384 or SHA-512.

input

About Hash Generator

Type or paste text and get its MD5, SHA-1, SHA-256, SHA-384 and SHA-512 digests at once, so there is no algorithm dropdown to pick from before you can see anything. The text is read as UTF-8 before hashing, which is what any server-side language will also do — so the digests here match what your backend produces for the same input.

The SHA family comes from the browser's own WebCrypto implementation, the same code used for real key material. MD5 does not: it was deliberately left out of that API because it is broken, so it is implemented here separately. It is still included, because an enormous amount of existing data is keyed and checksummed with it and you sometimes just need to match what is already there.

Nothing is uploaded. That matters if the string you are hashing is a password you are checking against a legacy database, or an API key you are fingerprinting.

Common questions

Is MD5 safe to use?
Not for anything security-related. Producing two different inputs with the same MD5 is cheap and well-documented, so it must never protect a password, a signature, or a download. As a cache key or a change-detection checksum, where nobody is attacking it, it is fine.
Why can I not decrypt a hash?
A hash is not encryption — it is one-way by design, and throws information away. Sites offering to "reverse" one are looking the value up in a table of previously-hashed common strings. That works for "password123" and never for a long random value.
Should I hash passwords with SHA-256?
No. SHA-256 is built to be fast, which is exactly wrong for passwords — it lets an attacker try billions per second. Use bcrypt, scrypt, or Argon2, which are deliberately slow and salted per user.
Why does my digest differ from another tool's?
Almost always a text encoding difference, or a trailing newline. This page hashes the exact bytes of your input as UTF-8. A file with a final newline hashes differently from the same text without one, and that catches people out constantly.

This page does the work itself, in this tab. Nothing you paste is sent to a server. Close the tab and no copy remains.