Skip to content
TinySolve

Hash Generator

Produce a SHA-256, SHA-384, SHA-512 or SHA-1 digest, and check it against a known value.

Runs in your browser — nothing you type is sent anywhere

Algorithm

The usual choice. Fast, and secure for every normal purpose.

SHA-256 digest

The hash appears here as you type.

Never store passwords as a plain hash. These algorithms are built to be fast, which is exactly wrong for passwords — a modern graphics card tries billions of guesses a second. Use bcrypt, scrypt or Argon2, which are deliberately slow.

About the Hash Generator

A hash turns any amount of input into a fixed-length fingerprint. The same input always produces the same digest, and changing a single character produces a completely different one, which is what makes hashes useful for checking that something has not been altered in transit or in storage.

Text is converted to UTF-8 before hashing, which is what makes the result agree with every other correct implementation. Encoding the same accented character a different way produces a completely different digest, and that mismatch is a surprisingly common source of wasted debugging when two systems disagree about a checksum.

Four algorithms are offered, and the honest advice is to use SHA-256 unless something specifically requires another. SHA-512 is not meaningfully more secure for ordinary purposes. SHA-1 is included because checksums in older systems still use it, but it has been considered broken since 2017 and must not be used for signatures.

MD5 is deliberately absent. Browsers do not provide it, and shipping a hand-written implementation of a hash that has been broken since 2004 would invite people to use it for something that matters.

There is also a comparison box: paste a checksum you were given and it will tell you whether your digest matches, which saves comparing sixty-four characters by eye.

How to use the Hash Generator

  1. Pick an algorithm

    SHA-256 is the right default. Each option explains what it is for, including when not to use it.

  2. Type or paste your text

    The digest is recalculated on every keystroke, so you can see immediately how a small change alters it completely.

  3. Compare against a known value

    Paste a checksum you were given into the comparison box and the tool tells you whether it matches, ignoring case and spacing.

  4. Copy the digest

    Copy it to your clipboard for pasting into a ticket, a config file or a verification step.

Frequently asked questions

Which hash algorithm should I use?
SHA-256 unless something you are working with requires otherwise. It is fast, widely supported and secure for every normal purpose. SHA-512 offers no practical advantage on most hardware, and SHA-1 should only be used where an older system demands it.
Why is MD5 not offered?
Browsers do not provide it, and writing our own implementation of a hash that has been considered broken since 2004 would encourage people to use it for something important. If you need MD5 for an old checksum, use a command-line tool where the context is clearer.
Can I use this to hash passwords?
No. These algorithms are designed to be fast, which is exactly wrong for passwords — a graphics card can try billions of guesses a second against them. Use bcrypt, scrypt or Argon2, which are deliberately slow and salted.
Can a hash be reversed?
Not directly — hashing throws information away, so there is nothing to reverse. But a short or predictable input can be found by guessing, which is precisely why plain hashes are unsuitable for passwords.
Why does my hash differ from another tool's?
Usually a character encoding difference, or invisible trailing whitespace in one of the inputs. This tool encodes as UTF-8, which is what other correct implementations do, so check for a stray newline at the end of your text first.
Is my text uploaded?
No. Hashing uses the Web Crypto API in your browser, so nothing is transmitted. That matters when the thing you are hashing is a secret or a piece of customer data.

You may also need

Password Generator

Create a strong random password, generated on your device and never transmitted.

Developer Tools

UUID Generator

Generate UUIDs in bulk — version 4 for randomness, version 7 when they need to sort.

Developer Tools

Base64 Encoder

Encode text to Base64, including emoji and every alphabet, with a URL-safe option.

Developer Tools

JWT Decoder

Read the header and claims inside a JSON Web Token, with expiry shown in plain language.

Developer Tools