tenuko*

Hash Generator

Generate MD5, SHA-1, SHA-256 and SHA-512 hashes from text or a file - computed entirely in your browser.

MD5
-
SHA-1
-
SHA-256
-
SHA-512
-

What each algorithm is good for

All four functions here take any input and return a fixed-length fingerprint. Change a single byte of the input and the whole hash changes unpredictably. That is what makes them useful for spotting corruption, deduplicating files and verifying that a download arrived intact.

  • MD5 - 128-bit, very fast, fine for checksums and cache keys, but broken for security.
  • SHA-1 - 160-bit, also fast, still seen in older Git internals, but no longer collision-resistant.
  • SHA-256 - the modern default: strong, widely supported, used in TLS certificates and Bitcoin.
  • SHA-512 - a larger digest for extra margin, often faster than SHA-256 on 64-bit machines.

Verifying a file

Publishers often list a SHA-256 checksum next to a download. To check yours matches, switch to the file tab, drop the file in, and compare the SHA-256 string character for character. A perfect match means the file is byte-for-byte identical to the original; any difference means it is corrupt or has been altered.

Hashing is not encryption

A hash is one-way: there is no key and no way to recover the original text from it. That is exactly why it suits integrity checks and password storage. If you need a reversible transform instead, use the Base64 encoder. For inspecting signed tokens, the JWT decoder is the tool you want, and the UUID generator covers random identifiers.

Frequently asked questions

What is a hash used for?
A hash is a fixed-length fingerprint of some data. The same input always produces the same hash, but you cannot work backwards from the hash to the input. Hashes are used to verify file integrity (does the download match the checksum?), to detect duplicate files, and inside password storage and digital signatures.
Is MD5 or SHA-1 still safe to use?
For checksums and detecting accidental corruption, both are fine and fast. For anything security-sensitive they are broken - attackers can craft two different inputs with the same MD5 or SHA-1 hash. Use SHA-256 or SHA-512 when the hash needs to resist deliberate tampering.
Does my file get uploaded to compute the hash?
No. Text is hashed with the Web Crypto API and MD5 is computed in JavaScript, all inside your browser. Files are read locally into memory and never sent anywhere, so you can safely hash confidential documents.
How do I verify a download with a checksum?
Drop the downloaded file into the file tab here, then compare the SHA-256 value it produces against the checksum the publisher lists. If every character matches, the file is intact and untampered. A single different character means the file is corrupt or has been modified.
Why are SHA-256 and SHA-512 different lengths?
The number is the size of the output in bits. SHA-256 produces 256 bits (64 hex characters) and SHA-512 produces 512 bits (128 hex characters). Longer digests give more collision resistance but take slightly longer to compute.

Related tools

JSON Formatter

Format, validate and minify JSON with syntax highlighting and clear error messages showing exactly where invalid JSON breaks.

Base64 Encode/Decode

Encode text or files to Base64 and decode Base64 back, with full Unicode support and URL-safe mode. Runs entirely in your browser.

URL Encode/Decode

Encode text for safe use in URLs or decode percent-encoded strings, with component and full-URL modes and a reference of common encodings.

HTML Encode/Decode

Convert special characters to HTML entities and decode entities back to text. Essential for displaying code and user input in web pages.