About the Hash Generator
Produces MD5, SHA-1, SHA-256, SHA-384 and SHA-512 hashes of text, computed in your browser through the Web Crypto API where available.
Use these for checksums and integrity verification — confirming a downloaded file matches what was published, or that two copies of a document are identical. MD5 and SHA-1 are broken for security purposes, meaning a determined attacker can construct collisions; they remain fine for detecting accidental corruption.
Do not hash passwords with these. Password storage needs a deliberately slow algorithm with a per-user salt — bcrypt, scrypt or Argon2 — precisely because fast hashing is what makes a leaked database easy to crack.
Common questions
Is MD5 or SHA-1 safe to use?
Not for security purposes — both are considered cryptographically broken, meaning a determined attacker can construct deliberate collisions. They're still fine for detecting accidental file corruption or confirming a download matches the original.
Can I use this to hash passwords for storage?
No. Password storage needs a deliberately slow, salted algorithm like bcrypt, scrypt or Argon2 — the speed that makes these hashes convenient for checksums is exactly what makes them unsafe for passwords.
Does the hash change if I add a single space?
Yes — even a one-character difference in the input produces a completely different hash. That sensitivity is what makes hashes useful for verifying exact file integrity.