Security
Cryptographic Hash Generator
Compute secure cryptographic message digests client-side using native window.crypto.subtle and pure JS MD5 with legacy safety indicators.
SHA-256 Output
Cryptographically SecureAll Hashes Simultaneously
Which Hash for Which Job
- SHA-256 — the default choice for file verification and general integrity in 2026.
- MD5 and SHA-1 — broken for security purposes (collisions demonstrated), but still fine for detecting accidental corruption of a download.
- A hash is one-way: identical input always yields the identical digest, and nothing can recover the input from it. That is why it verifies downloads, not why it protects passwords.
Reading a Verification Result
If your digest differs from the publisher's, first check the boring causes: a trailing newline, mixed case, or comparing a SHA-256 against a published MD5. Exact string match, whitespace and case included, is the rule. (This tool processes files and text locally — nothing is transmitted.)
Choosing a Hash for the Job
A hash turns any input into a fixed-length fingerprint, and changing a single character produces a completely different result. That makes it ideal for verifying that a downloaded file matches the publisher's checksum. SHA-256 is the sensible default for integrity checks today.
MD5 and SHA-1 are still common in older checksums, but collisions can be produced for both, so they should not be used to prove who wrote something. Hashing is also not encryption: nothing can be recovered from the output. For storing passwords, a plain hash is the wrong tool, since fast hashes are exactly what attackers want; use a slow, salted scheme such as bcrypt or Argon2 on the server instead.
How It Generates Output
- Encodes input string to UTF-8 bytes and calculates SHA-256, SHA-384, SHA-512, and SHA-1 via native Web Crypto API.
- Computes RFC 1321 MD5 digests locally using pure JavaScript without server transmission.
- Flags MD5 and SHA-1 as legacy algorithms unsuitable for security-sensitive cryptographic applications.
Example Output
Common Questions
Can a SHA hash be reversed?
No. Cryptographic hashes are strictly one-way mathematical functions.
What is the difference between MD5 and SHA-256?
MD5 produces a 128-bit digest rendered as 32 hex characters and is cryptographically broken (collisions are practical to construct). SHA-256 produces a 256-bit digest as 64 hex characters and is the recommended general-purpose choice.
Related Security
Secure Password Generator
Generate cryptographically secure passwords locally via crypto.getRandomValues() with accurate real-time entropy scoring and zero server transmissions.
Base64 Encoder & Decoder
Encode or decode text to Base64 ASCII strings with full multi-byte Unicode UTF-8 handling.
UUID Generator (v4 & v7)
Generate random UUID v4 and time-ordered UUID v7 identifiers locally using native browser crypto primitives with bulk and case options.