Skip to content

Online Hash Generator

Generate MD5, SHA-1, and SHA-256 hashes instantly.

What is a Hash?

A hash function is an algorithm that transforms an input of any size into a fixed-size string of characters. Common uses include password storage (hashed), file integrity verification, and digital signatures.

Advertisement

How to use the hash generator

  1. Type or paste text into the input box. The hash updates as you type.
  2. Choose an algorithm: MD5, SHA-1 or SHA-256 (the default).
  3. Copy the hexadecimal output with the copy button.

The text is hashed as UTF-8 in your browser; nothing is uploaded.

Same input, same fingerprint

A hash is deterministic and one-way: the same input always gives the same output, a one-character change gives a completely different output, and the original can't be recovered from it. For example, the SHA-256 hash of hello always starts with 2cf24dba…, while Hello gives an entirely different value.

Which algorithm should I use?

AlgorithmOutputStatusGood for
MD5128 bits (32 hex chars)Broken: collisions can be created deliberatelyNon-security checksums and matching legacy systems only
SHA-1160 bits (40 hex chars)Deprecated: practical collisions demonstrated in 2017Legacy compatibility (e.g. older Git objects)
SHA-256256 bits (64 hex chars)Secure and widely recommendedFile integrity, digital signatures, API request signing

Important: don't store passwords with plain hashes

Fast hashes like MD5, SHA-1 and even SHA-256 are the wrong tool for storing user passwords. Modern GPUs can compute billions of them per second, so leaked hashes of short passwords are cracked quickly. If you are building a login system, use a slow, salted password-hashing function designed for the job: Argon2id, scrypt or bcrypt. Most programming languages and frameworks include one (for example PHP's password_hash()).

Common uses

  • Verifying downloads: compare the SHA-256 checksum published by a software vendor with the hash of the file you downloaded.
  • Detecting changes: store a hash of a configuration or document and compare later.
  • Cache keys and IDs: derive a stable identifier from content.

Frequently asked questions

Can a hash be “decrypted”?

No. Hashing is one-way. Websites that claim to “decrypt MD5” are simply looking the hash up in huge tables of previously hashed common words, which is exactly why weak passwords are unsafe even when hashed.

Why does my hash differ from another tool's?

Check for invisible differences such as a trailing newline or space, or a different text encoding. This tool hashes exactly what is in the box, encoded as UTF-8.