Hash Generator (SHA-1/256/384/512)
Compute SHA-1, SHA-256, SHA-384 and SHA-512 digests of any text using the Web Crypto API. All four appear at once, in hexadecimal — hashed locally in your browser and never transmitted.
About cryptographic hashes
A cryptographic hash function takes an input of any size and produces a fixed-length digest — a string of hexadecimal characters that acts like a fingerprint of the data. Good hash functions have three key properties: the same input always yields the same digest, tiny changes to the input scramble the output completely (the "avalanche effect"), and you cannot feasibly work backwards from a digest to the original data.
The SHA-2 family (SHA-256, SHA-384, SHA-512) is the modern standard. SHA-1 is older and no longer considered safe against determined attackers, but it still appears in legacy systems and checksums, so it is included here for convenience.
Hashing is done entirely on your device with crypto.subtle.digest(). The text you enter is never uploaded, logged, or stored anywhere — you could pull the network cable and this page would still hash your input.
Common uses
- Integrity checks: verify a downloaded file matches its published SHA-256 checksum.
- Deduplication and caching: use a digest as a content address.
- Building blocks: hashes power digital signatures, HMACs and password storage (with salting and a slow KDF).
A hash on its own does not authenticate who produced a message — for that you add a secret key, which is exactly what our HMAC generator does. These functions also underpin the certificates behind TLS/SSL. If you need random secrets instead of digests, see the token generator. Note: the digest length is fixed per algorithm — SHA-256 is always 64 hex characters no matter how much text you feed it.
Frequently asked questions
What is a cryptographic hash?
A hash function turns any input into a fixed-length string of hexadecimal characters called a digest. The same input always gives the same digest, but you cannot reverse it back to the input, and even a one-character change produces a completely different result.
Is my text uploaded anywhere?
No. Hashing happens in your browser via crypto.subtle.digest. Your text is never sent to a server, logged, or stored. You can use the tool offline.
Why is there no MD5 option?
The browser's Web Crypto API does not provide MD5 because it is cryptographically broken and unsafe for security. This tool sticks to the SHA family. For anything that matters, prefer SHA-256 or stronger; SHA-1 is included only for legacy checks.
How long are the digests?
In hexadecimal, SHA-1 is 40 characters, SHA-256 is 64, SHA-384 is 96 and SHA-512 is 128. Each hex character represents 4 bits, so SHA-256 for example is 256 bits.
Want the theory? Read the guides → · Visit the zoo →