03 / DEVELOPER
Hash Generator
Hash any text or file with MD5, SHA-1, SHA-256 or SHA-512 — entirely client-side. Large files run in a Web Worker so the page stays responsive.
MD5 and SHA-1 are unsuitable for password storage or integrity-critical use. They remain useful for file checksums and compatibility with legacy systems.
- MD5
- SHA-1
- SHA-256
- SHA-512
How to use
- 1Pick the Text or File tab depending on what you want to hash.
- 2For text, paste or type into the input — all four hashes are computed live.
- 3For files, drop or select a file. Anything 4 MB or bigger is hashed in a Web Worker so the page stays responsive.
- 4Use Copy on any algorithm row to grab the digest. Hashes are case-insensitive but we render lowercase for consistency.
Frequently asked questions
Why is MD5 still here if it's broken?
MD5 is broken for cryptographic uses (password hashing, integrity against an attacker), but it remains the standard checksum on countless legacy systems and Linux ISOs. The on-screen warning makes the safe-use boundary explicit.
Can I trust this for password hashing?
No. Use bcrypt, scrypt or Argon2 server-side. None of MD5, SHA-1, SHA-256 or SHA-512 are designed for password storage.
What's the largest file I can hash?
Limited by your device's memory and patience. Multi-gigabyte files work but take time; the worker streams the file rather than loading it all at once.
Are SHA-1 and SHA-256 the same speed?
SHA-256 is typically a bit slower in pure JS, but on most browsers both run via the platform's native Web Crypto so the difference is negligible.
Do you log the file or its hash?
No. The file is hashed entirely in your browser — neither the bytes nor the digest leaves your device.