Hash Generator

About Cryptographic Hashes

A cryptographic hash function takes an arbitrary input — text, a file, or any binary data — and produces a fixed-length string called a digest or hash. This process is deterministic (the same input always yields the same hash) and one-way (you cannot reverse a hash back to the original data). Even a single changed bit in the input produces a completely different hash, making these functions invaluable for verifying data integrity, storing passwords, and detecting tampering.

Hash Algorithm Comparison

This tool supports four common algorithms, each with different strengths and use cases:

• MD5 (128-bit output) — Extremely fast and widely used for non-security checksums like file-deduplication or download-cache keys. However, MD5 is cryptographically broken: collision attacks are trivial, meaning an attacker can craft two different inputs that produce the same hash. Never use MD5 for passwords, signatures, or anything security-sensitive.
• SHA-1 (160-bit output) — Faster than SHA-2 and still common in legacy systems (Git commit IDs, old TLS certificates). SHA-1 is officially deprecated due to demonstrated collision attacks (the SHAttered attack from 2017). Use it only for backward compatibility or checksums in non-security contexts.
• SHA-256 (256-bit output) — The current industry standard. SHA-256 belongs to the SHA-2 family, is widely considered secure, and is used in TLS certificates, blockchain technology, digital signatures, and modern password hashing schemes. It offers an excellent balance of speed and security for most applications.
• SHA-512 (512-bit output) — A stronger member of the SHA-2 family with a larger digest size. It is more resistant to brute-force and collision attacks than SHA-256, though it produces longer hash strings (128 hex characters). SHA-512 is ideal for high-security environments such as government systems, critical infrastructure verification, and forensic data authentication.

For general-purpose hashing, SHA-256 is the recommended default. Use SHA-512 when stronger guarantees are required, and restrict MD5 / SHA-1 to legacy compatibility or non-security checksums.

How to generate file hashes

Switch to the File tab and drop your file into the browser — or click to browse. This tool uses the Web SubtleCrypto API combined with array buffers to stream and hash large files directly from your hard drive without ever uploading a single byte to the internet. Your documents, code, and images remain entirely on your machine.

File hashing is essential for verifying downloaded software integrity — compare the generated hash against the publisher's official checksum to confirm the file hasn't been corrupted or tampered with. It is also useful for detecting duplicate files, validating backups, and ensuring forensic evidence has not been altered.

Related Tools

If you work with hashes frequently, you may also find the Password Generator useful for creating strong, random passwords to pair with salted password hashes. For working with encoded data, try the Base64 Encoder / Decoder to convert between binary data and text-safe formats.