ToolXuite
Developer Tools
H

Hash Generator

Developer Tools

Generate MD5, SHA-1, SHA-256, SHA-384, and SHA-512 hashes from any text or file. All hashing runs in your browser — nothing is uploaded.

0 chars0 bytes
Enter text or upload a file to generate hashes

How to Use the Hash Generator

  1. Choose the Hash Text tab to hash a string, or Hash File to hash a local file.
  2. Type or paste your text — hashes update automatically as you type.
  3. For files, drag and drop or click the upload area to select any file up to 100 MB.
  4. All five algorithms (MD5, SHA-1, SHA-256, SHA-384, SHA-512) are shown simultaneously.
  5. Toggle between lowercase and uppercase hex output with the hex / HEX button.
  6. Click any copy icon to copy a specific hash to your clipboard.

When to Use Each Algorithm

  • MD5 — Legacy checksums and non-security uses. Fast but cryptographically broken; do not use for passwords or signatures.
  • SHA-1 — Deprecated for security use. Still common in older Git commits and certificate fingerprints.
  • SHA-256 — The modern standard. Use for file integrity checks, digital signatures, and API authentication.
  • SHA-384 — Truncated SHA-512. Used in TLS certificates and when a slightly longer hash is preferred.
  • SHA-512 — Maximum SHA-2 strength. Good for high-security contexts and password hashing (combined with a salt).

Frequently Asked Questions

Is my text or file sent to a server?

No. MD5 is computed using the @noble/hashes library, and SHA-* hashes use the browser's built-in Web Crypto API. Everything runs locally — your data never leaves your device.

Can I hash large files?

Yes. The tool supports files up to 100 MB. The entire file is read into memory using the File API and hashed client-side. Very large files may take a second or two.

Are these hashes suitable for storing passwords?

No. General-purpose hash functions like SHA-256 are designed to be fast, which makes them vulnerable to brute-force attacks on passwords. Use a dedicated password hashing algorithm like bcrypt, scrypt, or Argon2 for passwords.

How do I verify a file download?

Switch to the Hash File tab, drop your downloaded file, and compare the SHA-256 hash shown here against the checksum published by the software author. If they match, the file is intact and unmodified.

Related Tools