No upload, 100% local, no account

Hash generator (MD5, SHA-1, SHA-256, SHA-512)

Compute cryptographic hashes (MD5, SHA-1, SHA-256, SHA-512) from any text or file. Everything runs locally, no upload.

How Hash Generator works

Hash Generator computes cryptographic and checksum hashes of the text you type or of a file you pick, covering MD5, SHA-1, SHA-256, and SHA-512. The SHA-family hashes use the browser's native Web Crypto API (SubtleCrypto.digest), which is a vetted, hardware-accelerated implementation. MD5 is computed by a standalone JavaScript implementation, since SubtleCrypto does not include MD5 (it is not considered cryptographically secure for new uses). Nothing you type is transmitted; every hash is produced entirely on your device.

Common uses include verifying the integrity of a downloaded file against a published checksum, generating a fixed-length fingerprint of a string for use as a cache key or identifier, or checking that two text values are identical without comparing them character by character.

Written by Bastien Sulyan

How to use Hash Generator, step by step

  1. Type or paste the text you want to hash into the input area.
  2. All hash values update instantly as you type.
  3. Click the copy icon next to any hash to copy it to your clipboard.
  4. Select specific algorithms using the checkboxes if you only need certain hash types.

Common use cases

  • A developer needs to compute the SHA-256 hash of a string to compare it against a server-side HMAC signature for debugging.
  • A system administrator downloads a software package and verifies its MD5 or SHA-256 checksum against the publisher's published value.
  • A database engineer uses a short SHA-1 hash of a URL string as a compact, collision-resistant cache key.
  • A security reviewer checks whether two configuration files have the same SHA-512 hash to confirm they are byte-for-byte identical.

Frequently asked questions

Which hashing algorithms does this tool support?

MD5, SHA-1, SHA-256, and SHA-512. SHA-1, SHA-256, and SHA-512 are computed using the Web Crypto API's SubtleCrypto.digest method in the browser. MD5 uses a separate client-side JavaScript implementation because SubtleCrypto does not expose MD5 (it is excluded as cryptographically broken for security purposes, though it remains useful for checksums).

Is the text I enter sent to a server for hashing?

No. The hashing runs locally in the browser. The SHA-* hashes use SubtleCrypto, a browser-native API that operates entirely in the browser process. The MD5 hash uses a JavaScript library bundled with the page. No text you enter here leaves your browser tab.

Can I use SHA-256 from this tool for a digital signature or HMAC?

This tool computes the raw hash of the input text. An HMAC requires a secret key mixed into the hashing process, which this tool does not do. For HMAC-SHA-256, you would need to use the Web Crypto API's SubtleCrypto.sign method in your own code, or a library that wraps it.

Why is MD5 described as 'not cryptographically secure'?

MD5 has known collision vulnerabilities: it is feasible to produce two different inputs that generate the same MD5 hash. This makes it unsuitable for security-critical uses such as password storage or digital signatures. It is still widely used for non-security checksums, such as verifying that a file was not corrupted during transfer, which is a perfectly valid use case.

Can I hash a file rather than typed text?

Yes. Switch to file mode and pick a file: it is read as an ArrayBuffer and hashed byte for byte, which is exactly what a published checksum covers. Reading a binary file as UTF-8 text would corrupt it, which is why the file never goes through the text field. Like the text mode, it stays on your device.

Do I need an account, and can I use this on my phone?

No account required. SubtleCrypto is a standard browser API available in mobile Chrome and Safari as well as desktop browsers, so checking a checksum works the same on a phone.