Easy Converter

Hash Generator (MD5/SHA)

Compute MD5, SHA-1, SHA-256, SHA-384 and SHA-512 hashes for any text or file directly in your browser. Use the result to verify downloads, generate Gravatar URLs, sign API payloads or compare large files without uploading them anywhere. Hashing is performed natively via the Web Crypto API.

How to use

  1. 1

    Choose an algorithm

    Pick MD5, SHA-1, SHA-256, SHA-384 or SHA-512 in the dropdown.

  2. 2

    Provide input

    Paste text or drop a file. Both UTF-8 strings and binary files are supported.

  3. 3

    Copy the digest

    The hash is shown in lowercase hexadecimal. Click to copy or compare with a reference value.

Technical details

A cryptographic hash function maps an input of any length to a fixed-length string with three crucial properties: the output looks random, the same input always produces the same output, and finding two inputs that share an output is computationally infeasible. Hashes are the backbone of password storage, file integrity checks, digital signatures and blockchain.

MD5 produces a 128-bit hash and was the workhorse of the 1990s, but it is now broken for collision resistance — two different inputs can be crafted to produce the same MD5 in seconds on a laptop. MD5 is still acceptable for non-security uses (file deduplication, Gravatar lookups) but never for password hashing or digital signatures.

SHA-2 family (SHA-256, SHA-384, SHA-512) is the modern standard, defined by NIST in 2001 and still considered secure. SHA-256 returns a 256-bit digest, perfect for blockchain (Bitcoin uses double-SHA-256) and file checksums. SHA-1 sits between the two — broken for collisions but still common in legacy git, where collisions remain expensive enough to deter most attackers.

For text input the generator encodes the string in UTF-8 before hashing. For file input it streams the file in chunks via the FileReader API and feeds them to `crypto.subtle.digest`, which means even multi-gigabyte files can be hashed without exhausting memory.

Frequently asked questions

Is MD5 still safe?
For non-security uses (file deduplication, Gravatar), yes. For passwords or signatures, never — use SHA-256 or stronger.
What is the difference between SHA-1 and SHA-256?
SHA-1 produces 160 bits, SHA-256 produces 256 bits. SHA-1 is broken for collisions, SHA-256 is not.
Can I hash files without uploading them?
Yes. The tool streams files locally via the FileReader API. Nothing leaves your browser.
Do hashes preserve any information about the input?
No. The output is one-way — you cannot recover the input from the hash.
How do I verify a downloaded file?
Compute SHA-256 of the file with this tool, then compare it character-by-character with the checksum published by the vendor.
Reviewed by:Easy Converter Engineering Team

This tool was tested and calibrated by our engineering team. All processing happens locally in your browser — your files and data never leave your device.