All hashes at once
Enter text once and get MD5, SHA-1, SHA-256, SHA-384 and SHA-512 simultaneously, each with one-click copy.
Hash Generator
Compute MD5, SHA-1, SHA-256, SHA-384 and SHA-512 of text all at once — with full UTF-8 support. Everything runs in your browser.
MD5
—
SHA-1
—
SHA-256
—
SHA-384
—
SHA-512
—
Checksum verification
Compare a hash against a published file or message checksum to confirm it has not been altered.
Local and private
SHA hashes use the native Web Crypto API; MD5 uses a built-in implementation. Nothing leaves your browser.
Frequently asked questions
What is a hash function?
A hash function turns arbitrary data into a fixed-length string (a digest). The same input always produces the same output, and even a tiny change in the input yields a completely different hash. Hashes are used to verify file integrity (checksums), index data and store passwords.
What is the difference between MD5, SHA-1 and SHA-256?
MD5 (128-bit) and SHA-1 (160-bit) are older and now considered cryptographically broken — do not use them for passwords or signatures, only for quick checksums. SHA-256, SHA-384 and SHA-512 (the SHA-2 family) are the modern standard and suitable for security-sensitive uses.
Does it support Cyrillic and emoji?
Yes. Text is encoded as UTF-8 before hashing, so Cyrillic, emoji and any Unicode characters produce a correct, standards-compatible hash.
Why is MD5 computed differently from SHA?
The browser Web Crypto API (crypto.subtle) supports only SHA-1 and the SHA-2 family, not MD5. So MD5 is computed with a built-in JavaScript implementation, while the SHA hashes use the native Web Crypto API. Both run entirely locally.
Can a hash be "decoded" back?
No. Hashing is one-way — you cannot recover the original input from the hash. That is why hashes are used for verification, not for storing recoverable data. (For passwords, use dedicated slow functions like bcrypt/argon2, not a plain SHA.)
Is my data uploaded anywhere?
No. All hashing happens locally in your browser via JavaScript and Web Crypto — nothing is sent to a server.