Hash Generator

MD5, SHA-1, SHA-256, and SHA-512 all take an input and produce a fixed-length "fingerprint": the same input always produces the same hash, and changing even one character produces a completely different one. This generates all four from text or a file, useful for verifying a download wasn't corrupted or comparing whether two files are actually identical.

MD5 and SHA-1 are cryptographically broken and should not be used for security purposes. SHA-256 or SHA-512 are recommended for integrity checks.

How to use the Hash Generator

  1. Choose whether to hash text or a file.
  2. Type or paste your text, or drag and drop a file into the input area.
  3. View the hash values generated by all four SHA algorithms displayed side by side.
  4. Click the copy button next to any hash to copy it to your clipboard.

MD5 and SHA-1 are broken for security, but still fine for integrity checks

MD5 and SHA-1 have both been demonstrated to have practical collision vulnerabilities, meaning a determined attacker can construct two different inputs that hash to the same value. This makes them unsuitable for anything security-critical, like verifying a file hasn't been maliciously tampered with, or storing passwords. They're still perfectly fine for a much lower-stakes use: confirming a download completed correctly, or quickly checking whether two files are identical, where nobody is actively trying to fool the check. For anything security-sensitive, use SHA-256 or SHA-512 instead.

Frequently asked questions

Which hash algorithm should I use?

SHA-256 is the standard, solid default for most purposes today; use SHA-512 if you need a longer digest; avoid MD5 and SHA-1 for anything where security matters, though they're fine for basic file-integrity checks against accidental corruption.

Can I hash a file, not just text?

Yes. Upload a file directly and the hash is computed from its actual binary contents.

Why did I get a different hash than the one published for a download?

Even a single-byte difference (a partial or corrupted download, a different file version, line-ending differences in a text file) produces a completely different hash. A mismatch means the files aren't byte-for-byte identical, and you should re-download rather than assume it's a rounding or formatting fluke.