Hash Generator (MD5, SHA-256)

Compute MD5 and SHA hashes for text or files, and compare them with an expected checksum. Files are hashed on your device.

✓ Runs locally in your browser — nothing is uploaded

In short: A hash generator computes a fixed-length fingerprint of text or a file with algorithms such as SHA-256, SHA-1 or MD5; the same input always gives the same hash, and any change produces a different one.

About Hash Generator (MD5, SHA-256)

A hash function turns any input into a fixed-length fingerprint. Change a single bit of the input and the fingerprint changes completely. That makes hashes ideal for checking that a download was not corrupted or tampered with, for deduplicating files, and for building cache keys.

This generator calculates MD5, SHA-1, SHA-256, SHA-384 and SHA-512 at once. SHA hashes use your browser’s native Web Crypto implementation; MD5 is computed with the CryptoJS library because browsers do not expose it. Paste the checksum published by a software vendor into the compare box and the tool tells you which algorithm matches, so you do not need to know in advance whether they used SHA-256 or SHA-512.

How to use Hash Generator (MD5, SHA-256)

  1. Choose Text to hash typed text (encoded as UTF-8) or File to hash a file.
  2. Type your text, or choose or drop a file. Results appear automatically.
  3. To verify a download, paste the expected checksum into the compare box.
  4. Select and copy any hash, or switch to uppercase if your reference uses capital letters.

Examples

Hashing a word

SHA-256 of hello is 2cf24dba5fb0a30e26e83b2ac5b9e29e1b161e5c1fa7425e73043362938b9824. MD5 of the same word is 5d41402abc4b2a76b9719d911017c592.

Verifying an ISO download

Drop the downloaded file, paste the vendor’s SHA-256 value into the compare box, and look for “Matches SHA-256”. If nothing matches, download the file again.

Frequently asked questions

Is MD5 still safe to use?

Not for security. MD5 and SHA-1 have practical collision attacks, so do not use them for signatures or password storage. They are still fine for non-adversarial uses like spotting accidental file corruption.

Should I hash passwords with SHA-256?

No. Plain fast hashes are easy to brute-force. Store passwords with a slow, salted algorithm such as Argon2, bcrypt or scrypt.

Why does my hash differ from another tool?

Usually because of invisible differences in the input: a trailing newline, Windows line endings (CRLF) or a different text encoding. This tool hashes exactly the characters in the box as UTF-8.

Are my files uploaded?

No. The file is read and hashed in your browser. Very large files take longer because all the work happens on your device.

Updated November 2026 · Free, no signup · How we build and test tools

Related tools All developer tools →