Generate MD5, SHA-1, SHA-256, and SHA-512 hashes. 100% client-side via Web Crypto API.
256-bit output. Recommended. Part of SHA-2 family.
All computation happens in your browser. No data is transmitted.
A cryptographic hash function takes any input and produces a fixed-length output (the digest) that is deterministic, fast to compute, and practically impossible to reverse. Even a single-character change in the input produces a completely different hash. Hash functions are used for data integrity verification, digital signatures, password storage, and file deduplication.
| Algorithm | Output | Status | Use case |
|---|---|---|---|
| MD5 | 128 bits (32 hex) | Broken | Legacy checksums only, never for security |
| SHA-1 | 160 bits (40 hex) | Deprecated | Git commits (legacy), avoid for new systems |
| SHA-256 | 256 bits (64 hex) | Recommended | File integrity, certificates, blockchain |
| SHA-512 | 512 bits (128 hex) | Recommended | High-security applications, HMAC |
Use SHA-256 as the default choice for file integrity checks, API signatures, and data verification. Use SHA-512 when maximum collision resistance is needed or when operating on 64-bit platforms where it can be faster than SHA-256. Use MD5 only for backward compatibility with systems that require it (e.g., verifying legacy checksums). Never use MD5 or SHA-1 for security-critical operations.
For password storage, do not use any of these algorithms directly. Use a key-derivation function like PBKDF2, bcrypt, or Argon2 instead. Plain hash functions are too fast and vulnerable to brute-force attacks when used for passwords.
No. SHA-1, SHA-256, and SHA-512 use the Web Crypto API built into your browser. MD5 uses a pure JavaScript implementation. No network requests are made.
No. Cryptographic hash functions are one-way by design. However, short or common inputs can be found using rainbow tables or brute force. This is why passwords should use salted key-derivation functions, not plain hashes.
MD5 remains widely used for non-security purposes like file checksum verification and data deduplication. Many software downloads still publish MD5 checksums. This tool lets you verify those checksums without trusting a third-party website.