Hash Generator
Generate MD5, SHA-1, SHA-256, SHA-384 and SHA-512 hashes of any text — all in your browser, nothing uploaded.
How it works
- Type or paste text — the four hashes update live as you go.
- Read all algorithms at once — MD5, SHA-1, SHA-256, SHA-384 and SHA-512 are shown together.
- Copy any hash — everything is computed on your device.
Private by design
You might hash a password, a token or a private file’s contents, so it matters that nothing is uploaded. Here every digest is computed inside your browser — the SHA family via the native Web Crypto API and MD5 in local JavaScript — and a Content-Security-Policy blocks the page from talking to any third-party server. Read more in our privacy policy.
Frequently asked questions
Which hash algorithms are supported?
MD5, SHA-1, SHA-256, SHA-384 and SHA-512. The SHA family is computed with the browser's built-in Web Crypto API; MD5 is computed locally in JavaScript because Web Crypto doesn't include it. All five are shown at once as you type.
Is my text sent to a server?
No. Every hash — including MD5 — is computed entirely in your browser. Our pages ship a Content-Security-Policy that blocks the page from sending your text anywhere.
Should I use MD5 or SHA-1?
Only for non-security purposes such as checksums, cache keys or matching a legacy system. MD5 and SHA-1 are cryptographically broken and must not be used for passwords, digital signatures or anything security-sensitive — prefer SHA-256 or stronger there.
What are hashes used for?
Hashes produce a fixed-length fingerprint of data. They're used to verify file integrity (checksums), detect changes, and as building blocks in signatures and tokens. A hash is one-way — you can't reverse it back to the original.
Is it free?
Completely free, with no sign-up and no limits.
Related developer tools
Turn any URL or text into a downloadable QR code (PNG or SVG) — generated in your browser, nothing sent to a server.
Decode a JSON Web Token's header and payload, read its claims and expiry, and verify HS256 signatures — all in your browser.
Encode text to Base64 or decode it back, UTF-8 safe — runs entirely in your browser, nothing uploaded.
Beautify, minify and validate JSON with clear error messages — processed locally in your browser, never uploaded.