Hash generator — MD5, SHA-1, SHA-256 online
Generate MD5, SHA-1, SHA-256, and other digests from text. Use them to check whether two copies match, compare against a published checksum, or fingerprint non-security data. Do not store passwords with MD5 or SHA-1 — for integrity in serious contexts, prefer SHA-256.
Computes MD5 and SHA-1/256/384/512 at once. Empty input is a valid hash.
Private · Fast · Free
A hash maps input of any length to a fixed hex string. Change one character and the digest jumps — useful for “did this change?” checks.
MD5 and SHA-1 are broken for security purposes but still appear in legacy “paste the MD5” requirements. For passwords, use purpose-built slow hashes (bcrypt, Argon2), not this page.
This tool hashes text you paste. For file binaries, use a file checksum tool or CLI on the actual bytes.
How to generate
- Enter or paste text
- Review MD5 and SHA digests shown together
- Copy the hex digest you need
What checksums are good for
- Quick same-or-different for two text blobs.
- Match vendor-published hash values.
- Multiple algorithms when docs specify one.
Scenarios
- Submission form asks for MD5 of document text
- Verify config was not edited by one line
- Demo avalanche effect in a lesson
Tips
- Watch trailing spaces and newlines when comparing.
- Never use MD5/SHA-1 as password storage — they are fast and cracked easily.
- Compare digests case-insensitively when docs use mixed case.
Behavior
| Input | Output | Note |
|---|---|---|
| Same text twice | Identical digest | Deterministic |
| One character changed | Completely different hash | Avalanche effect |
Hash FAQ
- Can I reverse the hash to get the text?
- Not by design. Short passwords can still be guessed via tables — that is why they must not be “hashed” with MD5 for login.
- What is an MD5 collision?
- Attackers can craft different files with the same MD5 — another reason to drop it for security.
- Hash vs. encryption?
- Hashes are one-way fingerprints; encryption is reversible with a key.