Skip to content

Security

Cryptographic Hash Generator

Compute secure cryptographic message digests client-side using native window.crypto.subtle and pure JS MD5 with legacy safety indicators.

100% Local Cryptography: Text hashing runs entirely in your browser via Web Crypto and native JavaScript. No text is ever uploaded.
32 characters (32 bytes)
Algorithm:

SHA-256 Output

Cryptographically Secure
Enter text above to compute hash...

All Hashes Simultaneously

SHA-256:—
SHA-384:—
SHA-512:—
SHA-1:—
MD5:—

Which Hash for Which Job

  • SHA-256 — the default choice for file verification and general integrity in 2026.
  • MD5 and SHA-1 — broken for security purposes (collisions demonstrated), but still fine for detecting accidental corruption of a download.
  • A hash is one-way: identical input always yields the identical digest, and nothing can recover the input from it. That is why it verifies downloads, not why it protects passwords.

Reading a Verification Result

If your digest differs from the publisher's, first check the boring causes: a trailing newline, mixed case, or comparing a SHA-256 against a published MD5. Exact string match, whitespace and case included, is the rule. (This tool processes files and text locally — nothing is transmitted.)

Choosing a Hash for the Job

A hash turns any input into a fixed-length fingerprint, and changing a single character produces a completely different result. That makes it ideal for verifying that a downloaded file matches the publisher's checksum. SHA-256 is the sensible default for integrity checks today.

MD5 and SHA-1 are still common in older checksums, but collisions can be produced for both, so they should not be used to prove who wrote something. Hashing is also not encryption: nothing can be recovered from the output. For storing passwords, a plain hash is the wrong tool, since fast hashes are exactly what attackers want; use a slow, salted scheme such as bcrypt or Argon2 on the server instead.

How It Generates Output

  1. Encodes input string to UTF-8 bytes and calculates SHA-256, SHA-384, SHA-512, and SHA-1 via native Web Crypto API.
  2. Computes RFC 1321 MD5 digests locally using pure JavaScript without server transmission.
  3. Flags MD5 and SHA-1 as legacy algorithms unsuitable for security-sensitive cryptographic applications.
Formula & Technical Standard
Digest = Hex(SubtleCrypto.digest("SHA-256", UTF8Bytes(text)))

Example Output

SHA-256 of "techtools"
Input: techtools
Output: b337856b3e64816c4fa103ef88d447d2f95c4793f0b48da143c7b77ce4ff5f04
Deterministic 256-bit hash.

Common Questions

Can a SHA hash be reversed?

No. Cryptographic hashes are strictly one-way mathematical functions.

What is the difference between MD5 and SHA-256?

MD5 produces a 128-bit digest rendered as 32 hex characters and is cryptographically broken (collisions are practical to construct). SHA-256 produces a 256-bit digest as 64 hex characters and is the recommended general-purpose choice.