How to Generate a Hash
A hash is a fixed-length fingerprint of some data: the same input always produces the same digest, and changing even one character produces a completely different one. That makes hashes ideal for verifying that a file or message hasn't been altered. This tool computes five of them at once. Type or paste your text and MD5, SHA-1, SHA-256, SHA-384 and SHA-512 appear together, recalculating live with every keystroke. The SHA family is computed with your browser's native Web Crypto engine, so results are fast and standards-correct, and text is treated as UTF-8 so emoji and non-Latin scripts hash exactly as they should. Paste an expected checksum into the verify field and the tool tells you which algorithm — if any — it matches, which saves squinting at long hex strings. MD5 and SHA-1 are clearly flagged: they're fine for detecting accidental corruption but broken for anything security-related. Everything runs in your browser, so your text never leaves your device.
Paste your text
Enter any text; all five hashes compute instantly and locally.
Pick your digest
Choose the algorithm you need and toggle uppercase if required.
Copy or verify
Copy a hash, or paste an expected checksum to confirm a match.
What Is a Hash?
One-way fingerprint
A hash function turns any input into a fixed-length digest. It's deterministic — the same input always gives the same result — but designed so you can't work backwards from the digest to the original data.
Why MD5 and SHA-1 are retired
Researchers can now construct two different inputs with the same MD5 or SHA-1 digest — a collision. That breaks their security guarantees, so use SHA-256 or stronger whenever integrity actually matters.
Common Use Cases
Verify a download
Compare a published checksum against the hash of the content you received.
Detect changes
Hash text before and after to see instantly whether anything was modified.
Cache keys
Turn a long input into a short, stable identifier for caching.
Deduplication
Spot identical content by comparing digests rather than full text.
API signatures
Produce SHA-256 digests used in request signing schemes.
Data integrity
Store a digest alongside data to detect corruption later.
Learning & teaching
Show how one changed character transforms the entire digest.
Debugging
Confirm two systems are working with byte-identical input.
Tips & Best Practices
Use SHA-256 or stronger
For anything security-related, choose SHA-256, SHA-384 or SHA-512 — never MD5 or SHA-1.
Never hash passwords this way
Passwords need a slow, salted algorithm like bcrypt or Argon2, not a fast general-purpose hash.
Hashing is not encryption
A hash can't be reversed, but it also can't be decrypted back — it's a fingerprint, not a container.
Watch invisible whitespace
A trailing space or newline changes the digest completely, which is the usual cause of mismatches.
Match the hex case
Some systems print uppercase hex. Toggle uppercase rather than assuming the hash is wrong.
Compare with the verify field
Pasting the expected checksum is far more reliable than reading long hex strings by eye.
Troubleshooting
My hash doesn't match another tool
Check for a trailing newline or space in one of the inputs — the most common cause. Also confirm both tools use UTF-8.
The verify field says no match
Confirm you pasted the full digest with no extra characters, and that the source text is byte-identical.
The hash is uppercase elsewhere
Hex case doesn't change the value. Toggle the uppercase option to match the other system's format.
Can I hash a file?
This tool hashes text you paste. For file checksums, use your operating system's built-in hashing command.
Frequently Asked Questions
How do I generate a hash for free?
Paste your text above and MD5, SHA-1, SHA-256, SHA-384 and SHA-512 all appear instantly. Copy any of them — free, no signup.
Which algorithms are supported?
MD5, SHA-1, SHA-256, SHA-384 and SHA-512, all computed at the same time.
Is MD5 safe to use?
Not for security. Collisions are practical, so MD5 is only suitable for detecting accidental corruption.
Is SHA-1 safe to use?
No. SHA-1 is also broken for security purposes; use SHA-256 or stronger instead.
Which hash should I choose?
SHA-256 is the sensible default. Use SHA-384 or SHA-512 when you need extra strength.
Can a hash be reversed?
No. Hashing is one-way by design — you can't recover the original text from the digest.
Should I hash passwords with this?
No. Passwords need a slow, salted algorithm like bcrypt or Argon2, not a fast general-purpose hash.
How do I verify a checksum?
Paste the expected hash into the verify field; the tool tells you which algorithm it matches, if any.
Does it handle Unicode?
Yes. Text is encoded as UTF-8 before hashing, so emoji and non-Latin scripts produce standards-correct digests.
Why is my hash different elsewhere?
Usually a trailing space or newline in one input, or a different text encoding. Digests change completely with any difference.
Can I get uppercase hex?
Yes. Toggle the uppercase option; the value is identical, only the display case changes.
Is my text sent to a server?
No. Everything runs in your browser, so your text never leaves your device.
Can I hash a file?
This tool hashes pasted text. For files, your operating system has built-in checksum commands.
What's the difference between the SHA lengths?
SHA-256, SHA-384 and SHA-512 produce 64, 96 and 128 hex characters respectively — longer means a larger security margin.
Does it work offline?
Once the page has loaded it runs entirely in your browser, so it keeps working without a connection.
Is hashing the same as encryption?
No. Encryption is reversible with a key; hashing is one-way and produces a fixed-length fingerprint.
Does it work on phones?
Yes, in any modern browser on Windows, Mac, Android or iPhone with nothing to install.
Is this tool really free?
Completely free, forever — no account, no ads and no premium wall.
100% free · No signup · Processed in your browser · Data never sent
Last updated: August 2026 · FlipMyFormat Hash Generator
Written and maintained by the FlipMyFormat team · Runs entirely in your browser