MD5 · SHA1 · SHA256 · SHA512 — compute hashes of text or files. 100% local
📁 Or drag a file here to compute its hash
The file is never uploaded to any server
A hash function turns any input — text, files, passwords — into a fixed-length string. The same input always produces the same hash; even a tiny change produces a completely different hash. Hash functions are one-way: you can't recover the input from the output.
SHA256 is today's general-purpose standard: it's fast, secure, and used in SSL/TLS, Firebase and blockchain. MD5 and SHA1 are considered weak for security — use them only for file checksums or non-critical comparisons.
Can I use SHA256 to hash passwords?
No. For passwords, use dedicated functions like bcrypt, scrypt or PBKDF2 (the latter available in the Web Crypto API). Fast hash functions like SHA256 are vulnerable to brute-force attacks. Firebase Authentication handles password hashing automatically.
How do I verify the integrity of a downloaded file?
Drag the file into the dropzone above and compare the resulting SHA256 hash with the one published on the software's site. If they match, the file hasn't been altered during download.
This tool calculates MD5, SHA1, SHA256 and SHA512 hashes of text or files directly in your browser, useful for verifying data integrity or generating unique identifiers.
For integrity checks on non-sensitive files they can still be used, but they're considered cryptographically weak and shouldn't be used to protect passwords or sensitive data: SHA256/512 with a salt, or better yet bcrypt/argon2, are better suited for that.
Hashing is a one-way operation: a given input always produces the same output, but you can't work back to the original input from the hash. Encryption, on the other hand, is reversible with the correct key, designed to temporarily hide content.
No, the hash calculation happens entirely in your browser: neither the text nor the file is ever sent to an external server.