Hash Generator

Generate MD5, SHA-1, SHA-256 and SHA-512 hashes from text.

What Does the Hash Generator Do?

The Hash Generator computes five widely used digests of any text in one click: MD5, SHA-1, SHA-256, SHA-512 and CRC32. A hash is a fixed-length fingerprint — the same input always yields the same output, but even a one-character change produces a completely different hash, and the process cannot be reversed to recover the input.

Hashing is performed server-side by PHP's battle-tested hash() engine, giving results identical to command-line tools like md5sum and sha256sum. The text is hashed in memory and never stored.

How to Generate Hashes

  1. Type or paste your text (up to 1 MB).
  2. Click Generate Hashes.
  3. All five digests appear at once — copy any of them with its button.

What Each Algorithm Is For

  • MD5 (128-bit) — checksums, cache keys and deduplication. Broken for security, still ubiquitous for integrity checks.
  • SHA-1 (160-bit) — legacy signatures and Git object IDs. Deprecated for new security uses since practical collisions were demonstrated in 2017.
  • SHA-256 / SHA-512 — the current standard family for digital signatures, certificates, blockchain and file verification.
  • CRC32 — a fast error-detection checksum used inside ZIP and PNG files; not cryptographic at all.

Developers verify downloaded files against published checksums, generate deterministic cache keys, compare configs across servers, and produce test vectors for their own hashing code.

Frequently Asked Questions

Can a hash be decrypted back to the original text?

No — hashing is one-way by design. The only "reversal" is guessing: attackers precompute hashes of common inputs (rainbow tables), which is why short or common passwords are crackable despite hashing.

Is MD5 still safe to use?

For non-security purposes (checksums, cache keys, deduplication) MD5 remains fine and fast. For anything security-related — passwords, signatures, certificates — use SHA-256 or stronger; MD5 collisions can be created at will.

Why shouldn't passwords be stored as plain SHA-256?

Fast hashes can be brute-forced at billions of guesses per second on GPUs. Passwords need deliberately slow, salted algorithms like bcrypt or Argon2. This tool is for checksums and development, not password storage.

Do identical inputs always give identical hashes?

Yes — that determinism is the whole point. Note that an extra space or different line ending counts as a different input and completely changes the hash.