🔒 Hashing is performed using the browser's built-in Web Crypto API. No data is ever sent to any server.
About the Hash Generator
Generate cryptographic hashes from text using the browser built-in Web Crypto API. A hash is a fixed-length fingerprint of its input: the same input always yields the same digest, and any change — even a single character — produces a completely different result. Because hashing runs locally, you can safely hash values you would not paste into a remote service.
How to use the Hash Generator
-
Enter the text to hash
Type or paste any string. Hashing runs as you type, with no submit step.
-
Choose an algorithm
Pick SHA-1, SHA-256, SHA-384 or SHA-512. SHA-256 is the sensible default for general integrity checking.
-
Copy the digest
Copy the hexadecimal output to compare against a published checksum or an expected value.
When to use it
Verifying file integrity
Compare a computed digest against a published checksum to confirm content has not been altered.
Generating cache keys
Produce a stable, fixed-length identifier from a longer string of input parameters.
Comparing values without storing them
Check whether two inputs are identical by comparing digests rather than the raw values.
Frequently asked questions
Can a hash be reversed?
No. Hash functions are one-way by design. However, short or common inputs can be found by brute force or rainbow table lookup, so hashing alone does not make a weak password safe.
Should I use SHA-1?
Not for security. Practical collision attacks against SHA-1 have been demonstrated, so it is unsuitable for signatures or certificates. It remains available here for compatibility with legacy systems that still require it.
Is SHA-256 suitable for storing passwords?
No. Plain SHA-256 is far too fast, which makes brute-forcing cheap. Use a purpose-built password hash such as bcrypt, scrypt or Argon2, which are deliberately slow and salted.
What is the difference between SHA-256 and SHA-512?
Digest length — 256 bits versus 512 bits. SHA-512 can be faster on 64-bit hardware. For most integrity purposes SHA-256 is sufficient.
Is MD5 supported?
No. MD5 is cryptographically broken and is not provided by the Web Crypto API. Use SHA-256 instead.
Related tools
Browse all free online tools on Tooly — every one runs in your browser, with no account required.