Skip to content
SimpleConvertSimpleConvert

Hash Generator

Generate SHA-1, SHA-256, SHA-384 and SHA-512 hashes of any text using the browser's native Web Crypto API.

How to use it

  • Type or paste your text — all four hashes are computed at once.
  • Hashing is one-way: you cannot recover the input from the hash.
  • Uses Web Crypto, so the text never leaves your browser.

A hash function takes any input and produces a fixed-length string that's practically unique to that input — change even one character and the entire hash comes out completely different. This computes SHA-1, SHA-256, SHA-384 and SHA-512 of any text at once, using the browser's own Web Crypto API rather than sending anything to a server.

SHA-256, SHA-384, SHA-512 — pick by length, not much else

These are all part of the same SHA-2 family and are all currently considered secure. The difference between them is output length — SHA-256 produces 64 hex characters, SHA-512 produces 128 — and, correspondingly, the resistance margin against future attacks. SHA-256 is the practical default used almost everywhere: file integrity checks, checksums, Git commit hashing (in newer configurations), and password-hashing schemes built on top of it.

What hashing is actually for

Hashing is one-way — there's no operation that recovers the original text from the hash, which is exactly the point. It's used to verify a file or message hasn't been altered (compare the hash of what you received against the hash the sender published), and as a building block inside password storage systems, where a service stores the hash of a password rather than the password itself.

Why SHA-1 is included but not recommended

SHA-1 is offered only for checking against older systems that still use it — it has known collision attacks (two different inputs producing the same hash), which breaks its security guarantees for anything that matters. Use SHA-256 or higher for anything new; SHA-1 output here is for compatibility, not for new security-sensitive work.

Questions people ask

Why is MD5 not offered?

MD5 and SHA-1 are broken for security purposes — collisions can be manufactured. SHA-1 is included only for checking against legacy systems; use SHA-256 or better for anything new.

Runs entirely in your browser. Nothing you type is uploaded, logged or shared.

Last updated 17 August 2026