About this tool
SHA-1, SHA-256 and SHA-512 — runs entirely in your browser.
The Hash Generator creates cryptographic digests using the Web Crypto API built into modern browsers. All hashing is performed locally — your text is never uploaded. Supports SHA-1, SHA-256 and SHA-512. Output is shown in lowercase hexadecimal. Use cases include verifying data integrity, generating checksums, and security research.
Example
Input: password
MD5: 5f4dcc3b5aa765d61d8327deb882cf99
SHA-256: 5e884898da28047151d0e56f8dc6292773603d0d6aabbdd62a11ef721d1542d8
How to use
- Type or paste text in the input.
- Select the hash algorithm (SHA-1, SHA-256 or SHA-512).
- Hash appears below instantly.
- Copy with one click.
Features
- SHA-1, SHA-256 and SHA-512
- Uses native browser Web Crypto API
- Lowercase hexadecimal output
- Copy all hashes at once
- Completely offline capable
When to use this
Developers generating test fixture hashes — computing the expected SHA-256 of a known input to assert against in unit tests.
Security researchers checking whether a known plaintext (like a common password) matches a hash found in a data breach.
QA engineers verifying that a system produces the correct hash output for a given input, without needing a development environment.
DevOps engineers quickly computing a checksum for a config file before and after a change, to confirm or rule out accidental modification.
Frequently Asked Questions
What is a cryptographic hash?+
A hash function maps any input to a fixed-length hexadecimal string (the digest). The same input always produces the same hash. It is computationally infeasible to reverse.
Which algorithm should I use?+
SHA-256 is the current standard for most purposes. SHA-512 produces a longer hash and has higher theoretical security. SHA-1 is legacy — still useful for checksums but deprecated for security.
Are these safe for storing passwords?+
Plain SHA-256 without a salt is not safe for passwords. Password storage requires a slow, salted algorithm like bcrypt, scrypt or Argon2.
Does adding a space change the hash?+
Yes, completely. Any change to the input — even one character or space — produces a completely different hash. This property is called the avalanche effect.
Is MD5 still secure for passwords?+
No. MD5 is cryptographically broken and must not be used for passwords. Use bcrypt, scrypt, or Argon2 for password hashing. MD5 is still useful for checksums where collision resistance is not required.
What is the difference between SHA-256 and SHA-512?+
Both are part of the SHA-2 family. SHA-256 produces a 256-bit (64-character hex) digest; SHA-512 produces a 512-bit (128-character hex) digest. SHA-512 is slower but offers a larger security margin.
How do I verify a downloaded file's integrity?+
Find the published SHA-256 checksum on the download page. Hash the file you downloaded using this tool (paste its text content) and compare the two hashes — they must match exactly.