Free · in your browser

Hash Generator

Generate SHA-1, SHA-256, SHA-384 and SHA-512 hashes of any text instantly, with clean lowercase hex output. Free, fast and private: your data never leaves your device.

Private by design — your text is hashed locally with WebCrypto and never uploaded.

How to generate a hash online

  1. Type or paste your text into the box above.
  2. Pick an algorithm — SHA-256, SHA-512, SHA-384 or SHA-1 — from the dropdown.
  3. The lowercase hex digest updates live; click Copy to grab it or Clear to start over.

Why use a hash generator?

Hashing turns any text into a fixed-length fingerprint, so it is perfect for verifying file integrity, building checksums, comparing values, or storing non-reversible tokens. A SHA-256 or SHA-512 hash will change completely if even one character differs, which makes it ideal for detecting tampering or accidental corruption. Because everything runs in your browser with the native WebCrypto engine, even sensitive strings such as API payloads or config secrets stay on your machine and are never sent over the network.

Choosing an algorithm: SHA-1 vs SHA-256 vs SHA-512

All four options produce a deterministic hex digest, but they differ in digest length and security posture. For anything new, prefer SHA-256 — it is the modern default for checksums, Git object IDs, TLS certificates and content addressing. Step up to SHA-512 when you want a larger digest and slightly better performance on 64-bit hardware. Reach for SHA-1 only when you must match a legacy system; it is considered broken for collision resistance and should not be used for new security work.

AlgorithmDigest sizeHex charsRecommended for
SHA-256256-bit64Default choice — checksums, integrity, fingerprints
SHA-512512-bit128High-assurance hashing, fast on 64-bit CPUs
SHA-384384-bit96Truncated SHA-512; common in TLS suites
SHA-1160-bit40Legacy compatibility only — avoid for security

Common use cases

  • Verify a download. Hash a file's text or paste the published value to confirm a SHA-256 checksum matches before you trust an artifact.
  • Detect changes. Store a digest of a config file or document and re-hash later — any difference flags tampering or corruption.
  • Cache keys & deduplication. Use a hash as a stable, fixed-length key for caching, content addressing or spotting duplicate records.
  • Idempotency & signatures. Generate request fingerprints for idempotency keys or to feed into webhook signature checks.

Tips & gotchas

Hashes are case-sensitive in input but rendered as lowercase hex here, matching sha256sum and Git. Watch invisible differences: a trailing newline, a space, or CRLF versus LF line endings will produce a completely different digest, so normalize whitespace before comparing. Hashing is one-way — there is no "decode" — and a SHA hash on its own is not encryption and not safe for storing passwords without a dedicated, salted algorithm such as bcrypt or Argon2.

Frequently asked questions

Is this hash generator free and private?
Yes — it is 100% free with no sign-up, and completely private. Your text is hashed in your browser with the native WebCrypto API (crypto.subtle.digest); nothing is ever uploaded to a server.
Which hash algorithms are supported?
SHA-1, SHA-256, SHA-384 and SHA-512. These are the secure-hash algorithms exposed by the browser WebCrypto engine. SHA-256 and SHA-512 are recommended for new work; SHA-1 is offered only for legacy checksums.
Why isn't MD5 available?
MD5 is not part of the browser WebCrypto standard, so it cannot run locally without loading an external library. MD5 is also cryptographically broken, so SHA-256 or SHA-512 is the better choice for integrity and checksums.
What format is the hash output?
Lowercase hexadecimal — the standard representation used by command-line tools like sha256sum, Git, and most checksum verifiers, so you can compare values directly.
Can I use this to securely store passwords?
No. A plain SHA hash is the wrong tool for password storage because it is fast and unsalted, which makes brute-force and rainbow-table attacks cheap. Use a purpose-built password hashing function such as bcrypt, scrypt or Argon2 on your server. This tool is for checksums, integrity verification and fingerprints, not credential storage.
Will the same text always produce the same hash?
Yes. Hash functions are deterministic, so identical input plus the same algorithm always yields the same digest on any device or platform. That is exactly why hashes work for verifying that a file or message has not changed in transit.

Related tools

Base64 Encoder / Decoder →   JSON Formatter →   All tools →