Hash generator
SHA-256, SHA-512, SHA-1 and MD5 hashes of any text, updated as you type. Hashing runs in your browser; your text is never uploaded.
Which hash for which job
| Job | Use | Avoid |
|---|---|---|
| Storing user passwords | Argon2id, scrypt, bcrypt | Any plain SHA or MD5, even salted |
| File integrity, downloads | SHA-256 | MD5, SHA-1 if tampering is a concern |
| Signing API requests, webhooks | HMAC-SHA-256 | Plain hash of secret + message |
| Storing API keys | SHA-256 of the key | Storing the key itself |
A hash turns any input into a fixed-size fingerprint. Change one character and roughly half the output bits flip. Try it above: add a full stop to your text and compare. That “avalanche effect” is why hashes are good at detecting changes, and why a hash alone tells you nothing about the input.
Speed is the catch for passwords. SHA-256 is built to be fast, which is exactly what an attacker with a stolen database wants. Password hashes like bcrypt are built to be slow and salted.
Questions people ask
How do I generate a SHA-256 hash?
Type or paste your text in the box. The SHA-256 hash appears instantly, along with SHA-1, SHA-384, SHA-512 and MD5. The text is UTF-8 encoded and hashed in your browser with the Web Crypto API; nothing is uploaded.
Can I use SHA-256 to store passwords?
Not on its own. SHA-256 is designed to be fast, so a stolen database of SHA-256 password hashes can be attacked at billions of guesses per second. Use a slow, salted password hash such as Argon2id, scrypt or bcrypt.
Is MD5 still safe?
No, not for anything security related. Practical MD5 collisions have been demonstrated since 2004. It is still used for non-security checksums, such as detecting accidental file corruption, and is included here for that purpose.
Can a hash be reversed?
Cryptographic hashes are one-way: there is no formula to get the input back. Short or common inputs can still be found by guessing, which is how “MD5 decrypt” sites work, by looking up hashes of known words.
Why is my hash different from another tool’s?
Usually because of invisible differences in input: a trailing newline, Windows line endings, or a different text encoding. This tool hashes exactly the UTF-8 bytes of what is in the box. The “trim” option removes leading and trailing whitespace.