What does this tool do?
A hash function takes any input — a word, a password, a whole file's contents — and turns it into a fixed-length string of letters and numbers called a digest. The same input always produces the same digest, but even a one-character change produces a completely different one. This makes hashes useful for verifying that a file wasn't corrupted or tampered with, for storing password fingerprints instead of raw passwords, and for quickly comparing two pieces of data without comparing them byte by byte.
Which algorithm should I use?
- MD5 / SHA-1 — fast, but cryptographically broken. Fine for checksums and duplicate detection; avoid for passwords or security signatures.
- SHA-256 — the current standard for most integrity and security use cases, including Bitcoin and TLS certificates.
- SHA-384 / SHA-512 — larger digests from the SHA-2 family, often faster than SHA-256 on 64-bit hardware.
Frequently asked questions
Is my text uploaded anywhere?
No. Hashing runs entirely client-side using the browser's Web Crypto API and the CryptoJS library. Nothing you type is sent to a server.
Can I hash a file instead of text?
This tool currently accepts pasted text. To hash a file, open it in a text editor and paste the contents, or use a dedicated file-checksum utility for binary files.
Why do MD5 and SHA-1 look "broken" in security contexts?
Researchers have demonstrated practical collision attacks against both, meaning two different inputs can be crafted to produce the same hash. That's disqualifying for passwords or digital signatures, though both remain useful for simple integrity checks.