ZapKit

Hash Generator: MD5, SHA-1, SHA-256

Get the MD5, SHA-1 and SHA-256 hashes of any text or file, and check a download against its published checksum, without uploading anything.

What is a hash generator?

A hash generator runs data through a cryptographic hash function to produce a short, fixed-length string that identifies it. The same input always gives the same hash, and the slightest change gives a completely different one, so hashes are used to verify downloads, detect duplicate files, build cache keys and identify Git commits.

This tool computes MD5, SHA-1 and SHA-256 together for text or a file, entirely in your browser, and compares the result with a checksum you paste so you can confirm a download is intact. The algorithms are implemented directly and checked against standard test vectors.

How to use the Hash Generator: MD5, SHA-1, SHA-256

  1. 1.Type text or choose a file

    Text is hashed as UTF-8; files up to 50 MB are read in your browser.

  2. 2.Read the hashes

    All three appear at once, in lower or upper case.

  3. 3.Verify a download

    Paste the checksum from the download page; a match is highlighted.

Example: hashing "hello world"

The 11 characters hello world, as UTF-8:

MD5
5eb63bbbe01eeed093cb22bb8f5acdc3
SHA-1
2aae6c35c94fcfb415dbe95f408b9ce91ee846ed
SHA-256
b94d27b9934d3e08a52e52d7da7dabfac484efe37a5380ee9088f7ace2efcde9
MD5 of "Hello world"
3e25960a79dbc69b674cd4ec67a72c62

One capital letter changes every character of the MD5.

Which hash to trust

A hash is a fixed-length fingerprint: change one character of the input and the whole hash changes. MD5 (128 bits) and SHA-1 (160 bits) are fine for spotting accidental corruption but are broken for security, because collisions can be manufactured. Use SHA-256 for anything that matters.

None of these is suitable for storing passwords, because they're designed to be fast. Password storage needs a slow, salted algorithm such as Argon2, bcrypt or scrypt.

Frequently asked questions

What is the MD5 of "hello world"?

5eb63bbbe01eeed093cb22bb8f5acdc3. Capitalise one letter and it becomes completely different.

Can a hash be reversed?

No, but short or common inputs can be found by guessing, which is why plain hashes are useless for passwords.

How do I verify a downloaded file?

Choose the file, then paste the SHA-256 published by the software's site. If it matches, the file wasn't corrupted or altered.

Is my file uploaded?

No. It's read and hashed on your device.

More Developer tools