Hash Generator
Generate SHA-1, SHA-256, SHA-384 & SHA-512 hashes. 100% private, nothing uploaded.
A hash function takes any input — text or a file — and produces a fixed-length string (the 'hash' or 'digest') that acts like a fingerprint: the same input always produces the same hash, and even a tiny change to the input produces a completely different one. This tool generates SHA-1, SHA-256, SHA-384, and SHA-512 hashes.
Hashing runs entirely in your browser using the Web Crypto API — the same cryptographic engine browsers use for HTTPS and other security features. Files are read and hashed locally; nothing is uploaded.
Step-by-step instructions
- 1
Choose text or file
Switch between hashing typed text or an uploaded file.
- 2
Enter or upload
Type text, or click to choose a file — hashes are calculated instantly.
- 3
Copy the hash you need
All four algorithms are shown at once; copy whichever your use case requires.
Common use cases
Verifying file integrity
Compare a downloaded file's hash against the one published by its source to confirm it wasn't corrupted or tampered with.
Checking for duplicate content
Two files or texts with identical hashes are (almost certainly) identical content.
Generating checksums for records
Store a hash alongside data to later verify it hasn't changed.
Tips for best results
- Hashes are one-way — you can't recover the original text or file from a hash. To 'check' a password against a stored hash, hash the input again and compare the results.
Frequently asked questions
Why isn't MD5 offered?
MD5 is cryptographically broken (collisions can be deliberately created) and isn't available in the browser's Web Crypto API — SHA-256 or SHA-512 are safer, equally fast alternatives for virtually every use case.
Does this tool upload my file?
No — files are read and hashed entirely in your browser using the Web Crypto API; nothing is sent to a server.
Which algorithm should I use?
SHA-256 is the most common default for general-purpose use; SHA-1 is weaker and mainly relevant for compatibility with older systems, not new security-sensitive work.