Hash Generator
Generate SHA-1, SHA-256 and SHA-512 hashes of any text.
How to use the Hash Generator
- Type or paste your text.
- Copy the hash you need.
About the Hash Generator
A hash is a fixed-length fingerprint of your data. The same input always produces the same output, a one-character change produces a completely different result, and you cannot work backwards from the hash to the text. Paste any text here and this page returns three hashes at once — SHA-1, SHA-256 and SHA-512 — as lowercase hexadecimal, computed from the UTF-8 bytes of what you typed. They are handy for checksums, cache keys, deduplication and verifying that a file or message arrived unchanged.
All three are produced by your browser's built-in Web Crypto API, so your text never leaves the page. Browsers only expose the SHA family, which is why our MD5 and bcrypt tools compute their hashes on the server and send your text there to do it; the all-hash generator runs every supported algorithm together.
Two honest cautions. SHA-1 is broken for collision resistance and should never back a signature or security check — keep it for legacy compatibility only. And none of these are password hashes: they are built to be fast, which is exactly wrong for storing passwords, where a slow algorithm like bcrypt or Argon2 belongs. As a rule, never paste a real password into any online hashing tool, including this one.
Frequently asked questions
Which algorithms does this page produce?
SHA-1, SHA-256 and SHA-512, all three at once from the same input, shown as lowercase hexadecimal.
Is MD5 supported here?
Not on this page. It runs entirely inside your browser, and browsers only expose the SHA family through the Web Crypto API. Use our MD5 hash generator instead, which computes the hash on the server.
Can I reverse a hash back into the original text?
No. Hashing is one-way by design. Short or common inputs can sometimes be found by guessing against precomputed tables, but the hash itself contains no route back to your text.
Does my text leave my browser?
Not from this page. All three hashes are calculated locally by your browser, so nothing is uploaded. Our MD5, CRC32 and bcrypt pages are different: they send your text to the server, which hashes it and discards it without storing or logging it.
Can I use SHA-256 to store user passwords?
You should not. SHA algorithms are fast, which lets an attacker with your database try billions of guesses per second. Use a deliberately slow password hash such as bcrypt or Argon2 instead.