Utileno
EN한국어
LOCAL TOOL · DEV

Hash Generator

Text or file, four algorithms at once, nothing uploaded.

  • MD5
  • SHA-1
  • SHA-256
  • SHA-512

How to use

  1. Type or paste text, or pick a file. All four hashes appear together.
  2. Paste the published checksum into the compare box to see whether it matches.
  3. Copy takes a single hash to the clipboard.

Examples

Checking a download

A release page prints a SHA-256 next to the file. Pick the downloaded file, paste the published value, and the tool says match or mismatch instead of making you read 64 characters.

The vector everyone tests with

SHA-256 of "abc" is ba7816bf8f01cfea414140de5dae2223b00361a396177a9cb410ff61f20015ad. If a library gives you something else, it is not hashing what you think it is.

Comparing two files

Hash both and compare the strings. Same hash means the same bytes, which is a stronger answer than the same size and date.

Encoding, not hashing

Percent-encoding and Base64 are reversible; a hash is not. If you need the text back, you want the other tool. URL Encoder / Decoder

UUID GeneratorVersion 4, from the browser random source. Nothing is sent or stored.Base64 Encoder & DecoderText and files to Base64 and back, safe for any language.Number Base ConverterBinary, octal, decimal and hex both ways, with the working shown.Unix Timestamp ConverterPaste an epoch timestamp to get local, UTC and ISO dates — or pick a date to get its timestamp.

FAQ

Is the file uploaded?

No. The file is read in the page and hashed there — nothing is sent to a server, which is also why a file larger than 500 MB is refused rather than silently filling your memory.

Should I use MD5 or SHA-1?

For checking that a download arrived intact, either is fine and both are still published. For anything where someone might want two different files to share a hash, use SHA-256: MD5 and SHA-1 are both broken against a deliberate collision.

Can I hash a password with this?

No. Password storage needs a slow algorithm with a salt — bcrypt, scrypt or Argon2. A plain SHA-256 of a password is cracked at billions of guesses per second.

Why do hashes of the same text differ between tools?

Almost always a text difference, not an algorithm one: a trailing newline, Windows line endings, or a different character encoding. This page hashes exactly the characters in the box as UTF-8.

Can a hash be reversed?

Not by computation. Short or common inputs can be found in a lookup table, which is why hashing an email address is not anonymising it.

Where does the maths come from?

SHA-1, SHA-256 and SHA-512 come from the browser’s own SubtleCrypto. MD5 is not in SubtleCrypto, so it is implemented here and checked against the RFC 1321 test vectors.