Hash Generator

A hash function transforms input data into a fixed-size string of characters. The same input always produces the same hash, but you cannot reverse the process to recover the original data.

SHA-256 is the most commonly recommended. MD5 and SHA-1 are considered weak for security purposes but fine for checksums. SHA-512 offers the highest security.

HMAC (Hash-based Message Authentication Code) combines a hash function with a secret key to verify both data integrity and authenticity.

Theoretically yes (called a collision), but for SHA-256 and above, this is computationally infeasible. MD5 and SHA-1 have known collision vulnerabilities.

Yes. All hashing happens in your browser using the Web Crypto API. Nothing is sent to any server.

MD5 is no longer considered secure for cryptographic purposes because practical collision attacks have been demonstrated since 2004. However, MD5 is still widely used for non-security tasks like checksum verification, cache key generation, and deduplication where collision resistance against adversaries is not required. For security-sensitive use cases like password hashing or digital signatures, use SHA-256 or SHA-512 instead.

Upload the file using the file upload button to generate its hash. Then compare the generated hash against the checksum provided by the file's distributor. Use the Compare Hashes section at the bottom of this tool to paste both hashes and check if they match. A match confirms the file has not been altered or corrupted during download.

Hashing is a one-way function — it produces a fixed-size digest from input data, and you cannot reverse it to recover the original data. Encryption is a two-way function — data is transformed using a key and can be decrypted back to its original form using the same key (symmetric) or a paired key (asymmetric). Hashing is used for integrity verification, password storage, and digital signatures, while encryption is used for confidentiality.