Enter text on the left to generate hash values.
Generate Cryptographic Hashes Instantly
Paste any text and the tool computes its MD5, SHA-1, SHA-256, SHA-384, and SHA-512 digests simultaneously in real time, displaying each as a lowercase hexadecimal string. SHA-family digests are computed via the browser's native Web Crypto API (SubtleCrypto.digest), which is fast and audited; MD5 uses a well-tested pure-JavaScript implementation because Web Crypto intentionally omits it.
Use this when verifying a downloaded file's checksum against a published reference, generating deterministic cache keys or ETags from content, producing a fingerprint for deduplication, implementing a content-addressable lookup, checking that two arbitrary strings are identical without transmitting them, or demonstrating hash properties (avalanche effect, fixed output length) in teaching material. For password storage do not use raw SHA — use a slow KDF like Argon2 or bcrypt.
Input is treated as UTF-8, so non-ASCII characters (emoji, accents, CJK) hash to the same digest you would get from any UTF-8 aware library in Python, Go, or Node. Each hash output can be copied independently with a single click, and the displayed hex matches the format produced by common CLI tools like sha256sum and md5sum byte-for-byte.
All computation is local — the input text is never sent to a server, which matters when hashing anything confidential.
About this tool
Cryptographic hash functions produce a fixed-size digest from arbitrary input. SHA-256 and SHA-512 are widely used for data integrity verification, password storage, and digital signatures.
- MD5, SHA-1, SHA-256, SHA-384, SHA-512
- Real-time hashing as you type
- Uses native Web Crypto API
- Copy individual hash values
100% client-side. Your inputs never leave your browser. Ads via AdSense (consent required).
Frequently asked questions
How do I compute a hash?
Paste text or upload a file, pick an algorithm (MD5, SHA-1, SHA-256, SHA-384, SHA-512), and the tool computes the digest using the browser's SubtleCrypto API (MD5 uses a JS shim since browsers dropped it). Output is lowercase hexadecimal by default with an option for uppercase. For files, the entire content is hashed byte-for-byte, matching what shasum or openssl dgst would produce on the same bytes.
Is the hash tool free?
Yes, fully free with no signup. Hash unlimited text or files, any size your browser can load. JSONCraft is free across every tool; the hash tool has no rate limit or size cap beyond browser memory. Useful for verifying downloads, generating cache keys, building content-addressed identifiers or debugging signature mismatches.
Does the hash tool upload my input?
No. All hashing runs in your browser via SubtleCrypto. Files are read with FileReader locally, never sent over the network. This matters when you're hashing a secret or a private document to produce a fingerprint; you get the same hex output a server-side tool would, without the data ever leaving your device.
Which algorithm should I use?
SHA-256 is the safe default for new work — widely supported, fast and collision-resistant. SHA-384 and SHA-512 offer more output bits when you need them (e.g., HMAC with long keys). SHA-1 is deprecated for security but still appears in legacy systems (Git, old TLS). MD5 is broken cryptographically but fine for non-security checksums (CDN cache keys, file deduplication). The tool offers all five so you can match what your upstream expects.
How does hashing text compare to hashing a file?
Text input is hashed as its UTF-8 byte representation. A file is hashed as its raw bytes — the exact content the file system stores. For a text file, encoding matters: a file saved as UTF-8 with BOM differs from UTF-8 without BOM and will hash differently. If you're verifying a download, always hash the file, not the text; copy-paste can silently change whitespace or encoding.