Hash generator
Every common hash for text or a file, at once.
Runs in your browser. Your files never leave your device.
- 5 hash types at once
- Compare with expected hash
- Nothing uploaded
How to generate hashes
- Paste text, or switch to file mode and drop a file.
- Read the MD5, SHA-1, SHA-256, SHA-384 and SHA-512 hashes.
- Copy any of them, or paste an expected hash to see which one matches.
Which hash to use
| Algorithm | Output length | Good for |
|---|---|---|
| MD5 | 32 hex characters | Legacy checksums only |
| SHA-1 | 40 hex characters | Legacy git and software hashes |
| SHA-256 | 64 hex characters | Modern checksums and signatures |
| SHA-384 | 96 hex characters | Higher-security signatures |
| SHA-512 | 128 hex characters | Longest output, similar speed to SHA-256 |
Why generate every hash at once
- Comparing against a checksum page that lists an algorithm you were not expecting.
- Matching a hash from old documentation that never says which algorithm it used.
- Seeing how output length scales from MD5 up to SHA-512 side by side.
- Confirming a colleague's copy of a file matches yours without agreeing on an algorithm beforehand.
How the compare box works
- Paste any expected hash, in any case, with or without a leading 0x.
- It is checked against all five results at once, and the message names which algorithm matched, if any.
Hash generator FAQ
Which hash should I use?
SHA-256 is the common default for checksums and signatures today. MD5 and SHA-1 are still used to match hashes published by older software, but should not be trusted for security.
Why does the compare box not say which hash matched?
It does. Paste the expected value and it checks all five hashes and reports which algorithm it matches, if any.
Can it hash large files?
Yes. Files are read directly in the browser and MD5 is computed in chunks so large files do not freeze the page.
Is anything uploaded?
No. All five hashes are computed on your device.
Does hashing a large file freeze the page?
No. MD5 is computed in 4 MB chunks and the SHA family runs on the browser's native Web Crypto API, so even large files hash without locking up the tab.
Are the hashes case-sensitive?
The values shown here are lowercase hex unless you tick Uppercase, but comparing against a pasted expected hash matches regardless of the case you paste it in.
Why does this include MD5 and SHA-1 if they are considered broken?
Some legacy systems and older published checksums only give MD5 or SHA-1. Having all five algorithms side by side saves a trip to a second tool when you need to match an older hash, while SHA-256 or higher stays the one to trust for anything security-sensitive.