What is a hash generator?
A hash generator runs data through a cryptographic hash function to produce a short, fixed-length string that identifies it. The same input always gives the same hash, and the slightest change gives a completely different one, so hashes are used to verify downloads, detect duplicate files, build cache keys and identify Git commits.
This tool computes MD5, SHA-1 and SHA-256 together for text or a file, entirely in your browser, and compares the result with a checksum you paste so you can confirm a download is intact. The algorithms are implemented directly and checked against standard test vectors.
How to use the Hash Generator: MD5, SHA-1, SHA-256
1.Type text or choose a file
Text is hashed as UTF-8; files up to 50 MB are read in your browser.
2.Read the hashes
All three appear at once, in lower or upper case.
3.Verify a download
Paste the checksum from the download page; a match is highlighted.
Example: hashing "hello world"
The 11 characters hello world, as UTF-8:
- MD5
- 5eb63bbbe01eeed093cb22bb8f5acdc3
- SHA-1
- 2aae6c35c94fcfb415dbe95f408b9ce91ee846ed
- SHA-256
- b94d27b9934d3e08a52e52d7da7dabfac484efe37a5380ee9088f7ace2efcde9
- MD5 of "Hello world"
- 3e25960a79dbc69b674cd4ec67a72c62
One capital letter changes every character of the MD5.
Which hash to trust
A hash is a fixed-length fingerprint: change one character of the input and the whole hash changes. MD5 (128 bits) and SHA-1 (160 bits) are fine for spotting accidental corruption but are broken for security, because collisions can be manufactured. Use SHA-256 for anything that matters.
None of these is suitable for storing passwords, because they're designed to be fast. Password storage needs a slow, salted algorithm such as Argon2, bcrypt or scrypt.
Frequently asked questions
What is the MD5 of "hello world"?
5eb63bbbe01eeed093cb22bb8f5acdc3. Capitalise one letter and it becomes completely different.
Can a hash be reversed?
No, but short or common inputs can be found by guessing, which is why plain hashes are useless for passwords.
How do I verify a downloaded file?
Choose the file, then paste the SHA-256 published by the software's site. If it matches, the file wasn't corrupted or altered.
Is my file uploaded?
No. It's read and hashed on your device.
Related tools
Password Generator
Strong random passwords made in your browser, with a strength meter.
UUID Generator
Random v4 and time-ordered v7 UUIDs, plus a UUID checker.
Base64 Encoder & Decoder
Base64 and Base64url for text (UTF-8) and files.
URL Encoder & Decoder
Percent-encode or decode URLs and query values, and see a URL's parts.
JWT Decoder
Decode a JSON Web Token's header and payload and check its expiry.
JSON Formatter & Validator
Pretty-print, minify, sort and validate JSON with line-numbered errors.