#️⃣ Hash Generator

This hash generator computes MD5, SHA-1, SHA-256, and SHA-512 digests from any text you type or paste, updating live as you type. It's built for learning how hash functions behave and for quick one-off verification tasks — checking that two pieces of text are byte-identical, generating a checksum-style fingerprint, or seeing exactly how sensitive these algorithms are to even a single-character change. It is not intended as an endorsement that all four algorithms are equally suitable for security work — the notes under each hash explain which ones are still considered secure today.

How It Works

For SHA-1, SHA-256, and SHA-512, the page calls the browser's native Web Crypto API (crypto.subtle.digest), which runs the hash directly in the browser's own optimized, audited implementation — no external library needed. The Web Crypto API does not expose MD5, since it's considered obsolete for the security-sensitive use cases the API targets, so this page includes a compact, self-contained JavaScript implementation of the classic MD5 algorithm, run entirely client-side. In all four cases, your input text is converted to bytes, processed through the algorithm's fixed sequence of bitwise operations, and the output is rendered as a hexadecimal string — the standard way hash digests are displayed.

Why It Matters

Hash functions turn arbitrary-length input into a fixed-length fingerprint, and a good cryptographic hash makes it computationally infeasible to find two different inputs that produce the same output (a "collision") or to reverse the hash back to the original input. That property is what makes hashes useful for verifying file integrity, detecting tampering, and — when combined with salting and a slow, purpose-built algorithm — storing passwords safely. But not every hash function keeps that property forever: as computing power grows and cryptanalysis improves, older algorithms like MD5 and SHA-1 have been broken for security purposes, even though they remain fast and useful for non-adversarial tasks like deduplication.

Tips for Accurate Results

• Hashes are extremely sensitive to input — even one extra space or a different line ending (CRLF vs LF) produces a completely different digest, so be careful when comparing hashes generated by different tools or systems.
• Never use MD5 or SHA-1 for anything security-relevant — passwords, digital signatures, or verifying that a file hasn't been maliciously tampered with. Use SHA-256 or SHA-512 instead.
• Never hash raw passwords with a general-purpose function like SHA-256 for storage — use a dedicated slow algorithm (bcrypt, scrypt, Argon2) designed to resist brute-force guessing.
• To verify a downloaded file's integrity, compare the hash published by the source against a hash you compute yourself using the same algorithm — a mismatch means the file changed or was corrupted in transit.
• Hexadecimal hash output is case-insensitive in meaning but is conventionally shown in lowercase — this generator follows that convention for consistency when comparing values.