Hash Generator

A cryptographic hash function takes an input of any length and produces a fixed-length output (the "digest") that is deterministic — the same input always produces the same hash — and practically irreversible — you cannot reconstruct the input from the hash alone. This tool uses the browser's built-in Web Crypto API (crypto.subtle.digest) for all computation. Nothing is sent to any server.

SHA-256 vs SHA-512

SHA-256 produces a 256-bit (32-byte, 64 hex character) digest. SHA-512 produces a 512-bit (64-byte, 128 hex character) digest and is marginally more collision-resistant, though SHA-256 is already considered secure for all practical purposes. Use SHA-512 in systems where future quantum attack resistance is a consideration, or when operating under compliance standards that mandate it.

Why MD5 is excluded

MD5 is not supported by the Web Crypto API because it is cryptographically broken — MD5 collisions can be generated in seconds on consumer hardware. If you need to verify a legacy MD5 checksum, use a local tool. For any new security-relevant use (data integrity, password hashing steps, API signatures), use SHA-256 or stronger.

Note: this tool hashes strings, not files. For file hashing, use sha256sum (Linux/macOS) or Get-FileHash (PowerShell). For password hashing in applications, use a dedicated password hash function (bcrypt, Argon2, scrypt) — not raw SHA. Raw SHA hashes of passwords are fast to brute-force; bcrypt and Argon2 are deliberately slow.