Developer & Web Tools
Hash Generator (SHA-256, SHA-1, MD5, CRC32)
Generate cryptographic and checksum hashes from text, entirely in your browser.
Privacy
Everything on this page runs inside your browser. Nothing you paste, type or upload is transmitted, logged or stored.
Tips
- SHA-256 is the right default. MD5 and SHA-1 are included because file checksums still use them widely, not because they are safe.
- MD5 has been collision-broken since 2004 and SHA-1 since 2017. Neither should be used for signatures, certificates or integrity where an attacker is involved.
- Hashing is not encryption. It is one-way — there is no way to recover the input, and no tool that claims to "decrypt" a hash is doing anything but looking it up in a table.
- Never hash a password with a plain hash function. Passwords need a slow, salted algorithm such as Argon2, bcrypt or scrypt, and that belongs on your server.
- These are implemented in plain JavaScript rather than the browser crypto API, which means they work on any origin and are verifiable against the published test vectors.
Frequently asked questions
Why is the same text always the same hash?
That is the point — a hash is deterministic. It is what makes checksums useful for verifying a download arrived intact. It is also why unsalted password hashes are weak: identical passwords produce identical hashes.
Can I hash a file?
Not in this tool, which works on text. For file integrity, use the checksum command your operating system provides — shasum on macOS and Linux, Get-FileHash in PowerShell.