Hash Calculator
Generate MD5, SHA-1, SHA-256, SHA-384 and SHA-512 hashes for any text or file. 100% private — nothing leaves your browser.
Hash output
About Hash Calculator
Cryptographic hash functions transform any input — a string of text, a document, a binary file — into a fixed-length fingerprint called a hash or digest. This fingerprint changes completely when even a single character of the input is altered, making hashes essential for verifying data integrity, comparing files, and understanding how modern security systems work.
Our Hash Calculator supports the five most widely used hash algorithms: MD5, SHA-1, SHA-256, SHA-384, and SHA-512. It generates all five simultaneously from any text you type or any file you drop in, so you never have to decide up front which one you need. The SHA family runs on the browser's native Web Crypto API; MD5 is computed by a small JavaScript library on the same page, because Web Crypto deliberately omits MD5 as a broken algorithm. Either way your data never leaves your device — no text, no files, no potentially sensitive content is transmitted anywhere.
Understanding which algorithm to use matters in practice. SHA-256 is the modern standard — it is used by Bitcoin, TLS certificates, and most security-conscious applications because no practical collision attacks against it are known. SHA-384 is a truncated SHA-512 and is the digest required by several TLS cipher suites. SHA-512 produces a larger digest and is marginally harder to brute-force. MD5 and SHA-1 are cryptographically broken for security purposes but remain widely used for file integrity checksums where collision resistance is not critical.
How to Use Hash Calculator
- 1Type or paste any text into the input field to generate hashes from a text string.
- 2Or switch to the "File Hash" tab and drop any file onto the upload area — click it to browse if you prefer.
- 3All five hash values (MD5, SHA-1, SHA-256, SHA-384, SHA-512) appear simultaneously in the output, refreshed as you type.
- 4Flip the output between Lowercase and Uppercase to match the casing of whatever checksum you are comparing against.
- 5Click the copy button next to any hash to copy it to your clipboard, in the casing you are looking at.
- 6To verify a file, compare the generated hash against the checksum published by the file source.
Use Cases
- →Verify the integrity of a downloaded file by comparing its SHA-256 checksum against the official value
- →Generate a unique fingerprint for a string to use as a cache key or deduplication identifier
- →Compare two files to confirm they are byte-for-byte identical without opening them
- →Learn how different hashing algorithms produce completely different outputs from the same input
- →Generate content hashes for cache-busting in web asset pipelines
- →Create a quick text fingerprint when you need a stable identifier from a variable-length string
Tips
- ✓SHA-256 is the recommended algorithm for any security-sensitive use case in modern applications
- ✓MD5 is fast and widely used for file checksums, but is NOT secure for passwords or signatures
- ✓Even a single space difference produces an entirely different hash — this is the avalanche effect
- ✓SHA-512 is slightly more secure than SHA-256 but produces twice the output length (128 hex chars)
- ✓Never use MD5 or SHA-1 for password hashing — use bcrypt, Argon2, or scrypt instead
- ✓File hashing works with any file type and size — the hash always has the same fixed length
- ✓Checksums published by download mirrors are often uppercase — switch the toggle instead of reformatting by hand
- ✓SHA-384 is worth knowing about even if you rarely pick it: it is what several TLS cipher suites specify
- ✓Switching between the Text and File tabs clears the previous input, so you never mix up which hash belongs to what
Frequently Asked Questions
A hash function takes any input (text, file, data) and produces a fixed-length string of characters. The same input always produces the same hash, but even a tiny change in the input produces a completely different hash.
They differ in output length and security strength. MD5 (128-bit) is considered broken for security use. SHA-1 (160-bit) is also deprecated. SHA-256 (256-bit), SHA-384 (384-bit) and SHA-512 (512-bit) are current standards — SHA-384 is a truncated SHA-512 and is the digest required by several TLS cipher suites.
All five at once — MD5, SHA-1, SHA-256, SHA-384 and SHA-512 — from the same input, so you never have to pick up front. The SHA family runs on the browser's native Web Crypto API; MD5 is computed by a small JavaScript library on the same page, because Web Crypto deliberately omits MD5 as a broken algorithm.
Yes. Use the Lowercase/Uppercase toggle above the results — handy when you are comparing against a checksum published in capitals. The copy button always copies the casing you are looking at.
No. MD5 and SHA-1 have been broken for password storage. For passwords, use a dedicated algorithm like bcrypt, scrypt, or Argon2.
The File Hash tab reads your entire file directly in the browser using the File API, converts it to a byte array, and runs each hash algorithm over the raw bytes. The file never leaves your device.
SHA-256 is the most widely used hash algorithm today. It is used by Bitcoin, TLS/HTTPS certificates, code signing, software integrity verification, JWT tokens, and HMAC authentication.
Hash functions are deterministic — the same input always maps to the same output. This lets you verify that data has not been modified by comparing hashes.