A hash (or digest) is a fixed-length string of characters produced by running data through a one-way mathematical function called a hash algorithm. The same input always produces the same output, but even a tiny change in the input produces a completely different hash. Hashes are used to verify file integrity, store passwords securely, and create digital signatures.

What is the difference between MD5, SHA-1, SHA-256, and SHA-512?

MD5 produces a 128-bit (32 hex character) digest — fast but cryptographically broken, not safe for security use. SHA-1 produces 160 bits — also deprecated for security purposes. SHA-256 and SHA-512 are part of the SHA-2 family and remain secure for all current applications; SHA-256 (64 hex chars) is the most widely used, while SHA-512 (128 hex chars) offers a larger margin of safety.

Can a hash be reversed back to the original text?

Not directly. Hash functions are one-way by design — there is no algorithm to derive the input from the output. However, attackers use precomputed 'rainbow tables' or brute-force all possible inputs to find a match. This is why MD5 and SHA-1 hashes of short or common strings can be reversed in practice: the input was already in the attacker's table. For secure password storage, always use a purpose-built algorithm like bcrypt, scrypt, or Argon2.

What are hashes used for?

Common use cases: (1) File integrity — software publishers publish the SHA-256 hash of download files so you can verify the file wasn't tampered with. (2) Password storage — hashed passwords protect user credentials if a database is stolen. (3) Digital signatures — hashes allow signing of documents without exposing the full content. (4) Data deduplication — identical files produce identical hashes, enabling efficient dedup.

Why is MD5 considered insecure?

MD5 is vulnerable to collision attacks — it is computationally feasible to find two different inputs that produce the same MD5 hash. This breaks its security guarantees for digital signatures and certificate validation. MD5 is also fast enough that billions of guesses per second are possible on modern hardware, making brute-force attacks practical for short inputs. Use SHA-256 or SHA-512 for any new security-sensitive application.

How do I verify a file's integrity using a hash?

Download the file and the published hash (usually SHA-256). Run the file through the Hash Generator above to produce its hash. Compare the two values character by character — if they match exactly, the file is identical to what the publisher uploaded. If they differ by even one character, the file was corrupted or tampered with during download.

Encoding & Conversion

Hash Generator

Generate MD5, SHA-1, SHA-256, and SHA-512 hashes — runs entirely in your browser.

Input0 chars

Frequently Asked Questions

Base64 Encode / Decode

Encode text to Base64 or decode Base64 to text with full UTF-8 support.

→

UUID Generator

Generate v4 (random) or v7 (timestamp) UUIDs in bulk.

→

Password Generator

Generate strong passwords with cryptographic randomness. Nothing leaves your browser.

→