Hash Generator
Hash text in your browser.
This runs in your browser. Nothing is uploaded.
Drop a file here or choose oneChoose file
- MD5 (checksum)
- SHA-1
- SHA-256
- SHA-384
- SHA-512
What a text hash is
A hash is a fixed-length digest calculated from input text. The same bytes produce the same digest, while a small change such as an extra space, different capitalization, or a line break produces a different value. This makes hashes useful for comparing downloads, checking copied configuration, and matching a value against a published checksum.
This page calculates five common digests together for text or a dropped file. HMAC mode signs the same input with a key you paste and shows HMAC-SHA-1 through HMAC-SHA-512. The key stays in the browser. HMAC-MD5 is not offered. The generated values can be copied individually or downloaded ashashes.txt. The input is never sent to a server.
MD5, SHA-1, and SHA-2
MD5 is labeled as a checksum because it remains common in legacy manifests and compatibility workflows, but it is not collision-resistant. SHA-1 is also a legacy algorithm with known collision weaknesses. They can help identify which digest an older system expects, but they should not be selected for new security-sensitive designs.
SHA-256, SHA-384, and SHA-512 belong to the SHA-2 family and are the stronger options offered here. Choose the algorithm required by the protocol or publisher. A longer digest is not a substitute for checking that you used the correct input encoding and exact text.
Checksums are not password storage
A checksum page is useful for integrity checks, not for storing passwords. Password storage needs a dedicated slow, salted password hashing scheme such as Argon2id, scrypt, or bcrypt, selected and configured by the application. Do not paste a real password into a general-purpose checksum tool as part of a password system.
Hashes are also not encryption. They are designed to be one-way digests, so they do not provide a key that can recover the original text. Treat a digest as sensitive when it can help confirm a secret or identify private content.
Compare exact input
Before comparing a digest, check leading and trailing spaces, newline style, Unicode characters, and whether the source includes a final newline. The page rejects an empty submission by default so a blank click is visible, even though hash algorithms can define digests for empty text. All calculation, copying, and downloading happen locally in your browser. For related local transformations, see Base64 orURL Encode/Decode.
FAQ
Does the hash generator upload my text?
No. Hashes are calculated in your browser. After the page loads, it still works in airplane mode. TheDevTab never receives the input.
Which hashes does this page generate?
It generates MD5, SHA-1, SHA-256, SHA-384, and SHA-512 values for the same text or file. HMAC mode adds HMAC-SHA-1 through HMAC-SHA-512 with a key that stays in your browser. HMAC-MD5 is not offered.
Are MD5 or SHA-1 password hashes?
No. MD5 and SHA-1 are shown as checksums for compatibility and integrity checks. They are not suitable for password storage or modern security-sensitive hashing. Use a dedicated password hashing scheme such as Argon2id, scrypt, or bcrypt.
Are SHA-1 and SHA-2 interchangeable?
No. SHA-1 is legacy and has known collision weaknesses. Use the algorithm required by the receiving system, and prefer SHA-256 or stronger for new checksum work.
Does whitespace affect a hash?
Yes. Hashes are calculated from the exact text, including spaces, line breaks, capitalization, and Unicode characters. Do not trim a value unless that is part of your protocol.
Can I hash an empty string?
The underlying algorithms can hash empty text. The page keeps that option off by default so an accidental blank submission is visible, and you can enable it when you need the RFC-defined empty digests.