Hash Generator
Generate MD5, SHA-1, SHA-256, SHA-384 and SHA-512 digests from text or files, compute HMACs with a secret key, and verify a hash against an expected value — all in your browser.
About the Hash Generator
Updated June 2026 · 100% client-side — your data never leaves your browser.
A cryptographic hash turns any input into a fixed-length fingerprint that changes completely with the smallest input change. Bytewrench's hash generator computes MD5, SHA-1, SHA-256 and other digests from your text instantly, using the browser's built-in Web Crypto API where possible.
Hashes are useful for verifying file integrity, generating checksums, deduplicating data and building cache keys. Everything is computed locally so your input stays private.
See also: UUID generator, Password generator
Generate MD5, SHA-1, SHA-256 and more from the same input at once.
Compare digests to verify that files or messages haven't changed.
Hashes recompute as you type, powered by native Web Crypto.
Your input never leaves the browser — ideal for sensitive strings.
Frequently asked questions
MD5 vs SHA-1 vs SHA-256 — which should I use?
Use SHA-256 for anything security-sensitive. MD5 (128-bit) and SHA-1 (160-bit) are faster and shorter but both have practical collision attacks, so they're only suitable for non-security checksums and legacy compatibility. SHA-256 has no known practical attacks.
Is MD5 secure?
Not for security purposes. MD5 is broken — attackers can deliberately craft two different inputs with the same MD5 hash (a collision), so it must not be used for digital signatures, password hashing or certificates. It's still fine as a fast checksum for accidental corruption.
Can a hash be reversed?
No. Cryptographic hashes are one-way functions, so there's no decode step. The only way to find an input for a given hash is to guess inputs, hash them and compare — which is why weak or common values can be cracked with precomputed tables.
How do I verify a file hash?
Hash the file (or, here, its text contents) with the same algorithm the publisher used, then compare the result character-for-character with the checksum they provided. If the two strings match exactly, the data is intact and unmodified.
Is my input sent to a server?
No. Hashes are computed entirely in your browser using the native Web Crypto API where available.