ToolzHash Generator
Compute MD5, SHA-1 and SHA-256 hashes of any text.
MD5
waiting for input…
SHA-1
waiting for input…
SHA-256
waiting for input…
SHA-512
waiting for input…
What a hash actually is
A cryptographic hash turns any input, of any length, into a fixed-size fingerprint. The same input always produces the same digest, a one-character change produces a completely different one, and there is no way back — the digest carries no route to the original text. That is what makes hashes useful for verifying that a file arrived intact, or that two pieces of content are identical, without comparing them byte by byte.
MD5 and SHA-1 are broken for security
Both have practical collision attacks: two different inputs can be crafted to share a digest — demonstrated against MD5 in 2004 and against SHA-1 by Google’s SHAttered attack in 2017. Neither should be used for signatures, certificates, or anything an adversary might try to forge. They remain perfectly serviceable as non-adversarial checksums, which is why you still see MD5 next to download links, and they are here for exactly that.
Hashing is not password storage
SHA-256 is designed to be fast, and a modern GPU computes billions of them per second — which is precisely wrong for passwords. Storing password hashes calls for a deliberately slow, salted algorithm such as bcrypt, scrypt or Argon2, tuned so that each guess costs real time. Nor is hashing encryption: a digest cannot be reversed, but common inputs are trivially recovered from precomputed rainbow tables.
How this page computes them
SHA-1, SHA-256 and SHA-512 come from your browser’s built-in Web Crypto API. MD5 is computed by a small implementation shipped with this page, because Web Crypto deliberately refuses to provide it. Your text is encoded as UTF-8 and hashed locally — nothing is uploaded, so the digests match what any command-line tool would give you for the same bytes.