Hash Generator
Type text or choose a file to get its MD5, SHA-1, SHA-256, SHA-384 and SHA-512 fingerprints — and check a download against a published hash.
Hashing is not encryption
Encryption is two-way: with the key, you get the original back. A hash is one-way: it produces a fixed-length fingerprint (128 bits for MD5, 256 for SHA-256) no matter how long the input is. Its uses are checking that a file has not changed, indexing data, and storing password verifiers without storing passwords.
If you found a 32- or 64-character hex string and want to know what it is, the cipher identifier will recognise it by its length.
Questions people ask
Can a hash be decrypted?
No. A hash function throws information away, so there is no way to run it backwards. “MD5 decrypter” sites work by looking up hashes of common passwords they have already computed. That is why real systems add a random salt and use slow password hashes such as bcrypt, scrypt or Argon2.
Is MD5 still safe to use?
Not for security. Practical collision attacks on MD5 have existed since 2004, and SHA-1 collisions were demonstrated publicly in 2017. Both are fine as checksums for detecting accidental corruption. For anything security-related, use SHA-256 or stronger.
Why does changing one letter change the whole hash?
Good hash functions have the avalanche property: each output bit depends on every input bit, so a one-bit change flips about half the output bits. That makes it impossible to tell how similar two inputs were from their hashes.
Is my text sent anywhere?
No. SHA hashes are computed with the browser’s built-in Web Crypto API and MD5 with a small local function. Nothing leaves your device.