Free Hash Generator — MD5, SHA-1, SHA-256, SHA-512
Type or paste text and all four hashes are computed instantly, locally, in your browser.
| MD5 | |
|---|---|
| SHA-1 | |
| SHA-256 | |
| SHA-512 |
What makes a hash function useful
A cryptographic hash function takes an input of any size — a single character or a multi-gigabyte file — and always returns output of a fixed length. SHA-256 always produces exactly 256 bits (64 hex characters); SHA-512 always produces 512 bits (128 hex characters), no matter how large or small the input was. Combined with the "avalanche effect" — changing even one character of the input completely scrambles the output in an unpredictable way — this fixed-length, deterministic behavior is exactly what makes hashes useful as a fingerprint for data integrity: hash a file, publish the digest, and anyone can hash their own copy and confirm it matches byte-for-byte without needing to compare the entire file directly.
Where this shows up in practice
- Verifying downloads — software distributors publish a SHA-256 checksum alongside a download; a mismatch after hashing your copy means the file was corrupted or tampered with in transit.
- Git commit identifiers — every commit is identified by a hash of its contents, which is also why changing a single line anywhere in history changes every commit hash after it.
- Cache keys and deduplication — hashing content to detect whether it's already been seen or processed before.
Frequently Asked Questions
Which hash algorithm should I use?
For anything security-related, use SHA-256 or SHA-512. MD5 and SHA-1 are cryptographically broken (collisions can be manufactured) and should only be used for non-security purposes like checksums, cache keys, or comparing against legacy values.
Can a hash be reversed to get the original text?
No — hashes are one-way functions. However, short or common inputs (like passwords) can be found via precomputed lookup tables, which is why passwords should be hashed with salted, purpose-built algorithms like bcrypt or Argon2, not plain SHA-256.
Why does the same text always produce the same hash?
That is the defining property of a hash function: deterministic output. Even a one-character change produces a completely different hash, which makes hashes ideal for verifying data integrity.
How do I verify a downloaded file wasn't corrupted or tampered with?
Compare its SHA-256 (or SHA-512) hash against the checksum the source published alongside the download. If your computed hash doesn't match exactly, the file differs from what the publisher released — even by a single bit — and shouldn't be trusted.
What does it mean that SHA-256 output is "fixed-length"?
SHA-256 always produces exactly 256 bits — 64 hex characters — whether you hash one character or an entire multi-gigabyte file. That consistency is part of what makes hashes practical as short fingerprints for arbitrarily large data.
Is my text sent to a server to be hashed?
No. SHA hashes are computed with your browser's built-in Web Crypto API and MD5 with local JavaScript. Nothing leaves your device.