Hash Generator
Generate multiple cryptographic hashes
Hash Algorithm Comparison
| Algorithm | Output Size | Security Status |
|---|---|---|
| MD5 | 128 bits | Broken |
| SHA-1 | 160 bits | Deprecated |
| SHA-256 | 256 bits | Secure |
| SHA-512 | 512 bits | Secure |
About the Hash Generator
This hash generator computes MD5, SHA-1, SHA-256, SHA-384 and SHA-512 digests of your text in a single pass, entirely inside the browser, so nothing you type is transmitted to a server.
This hash generator produces five digests of the same input at once — MD5, SHA-1, SHA-256, SHA-384 and SHA-512 — which is what you want when you are comparing a value against a checksum somebody else published and do not know which algorithm they used.
It runs entirely in your browser. SHA-1 through SHA-512 come from the Web Crypto API built into the browser itself; MD5 is computed by a local implementation, because Web Crypto deliberately leaves MD5 out. Nothing you paste is uploaded, which matters if the string is a token or a password you are checking against a leaked list.
Treat MD5 and SHA-1 as compatibility formats only. Both have practical collision attacks, so they can confirm a file matches a published checksum but cannot prove nobody tampered with it. SHA-256 is the sensible default, and none of these belong anywhere near password storage — that needs a deliberately slow algorithm such as bcrypt, scrypt or Argon2.
How to use the Hash Generator
- Paste your text. Type or paste the string you want to hash.
- Generate the digests. All five algorithms are computed at once.
- Find the one you need. Each digest is labelled with its algorithm and length.
- Copy or compare. Copy the digest, or check it against an expected value.
Hash Generator features
- MD5, SHA-1, SHA-256, SHA-384 and SHA-512 in one pass
- Runs in the browser — input is never transmitted
- Hexadecimal output with a character count
- Copy any digest with one click
- Marks which algorithms are broken or deprecated
- No account or signup
Frequently asked questions
Is my input sent to a server?
No. Every digest is computed in your browser, so the text never leaves your device.
Why are SHA-3 and RIPEMD-160 not offered?
The browser's crypto API implements neither, and this tool does not use a server. Use a command-line tool such as openssl for those.
Should I use MD5 or SHA-1?
Only to compare against an existing checksum. Both have practical collision attacks and are unsuitable for security.
Can I hash passwords with these?
No. They are designed to be fast. Password storage needs bcrypt, scrypt or Argon2.
Which should I use by default?
SHA-256, unless a specification or an existing checksum names something else.