Skip to content
I Hate Online Tools

Hash generator

SHA-256 and SHA-1 of pasted text, via the browser's Web Crypto API.

This runs in your browser. Nothing is uploaded.

About Hash generator

Computes SHA-256 and SHA-1 of pasted text with the browser's own Web Crypto API, so the string never leaves the tab.

Checksums are how you confirm a string did not change, or how you compare two secrets without printing them. I am not interested in shipping MD5. It is broken for collision resistance and it is not in Web Crypto, which means a third-party library and a false sense of safety. This page does SHA-256 and SHA-1, both via crypto.subtle.digest, both hex-encoded lowercase.

SHA-1 is here because a lot of older APIs still ask for it, not because I think you should start a new system on it. Prefer SHA-256. Empty input produces empty output rather than the well-known hash of an empty string — if you want that, type nothing after a space and delete it, or type the empty value you actually intend to hash. The digest is of the UTF-8 bytes of whatever is in the box.

This is not HMAC, not a password hasher, and not a file hasher. A password deserves a dedicated KDF. A file deserves to be hashed as bytes, which is a different tool than a text box. If you paste a private key here, it is still only in this tab — and you should still close it when you are done.

How to use Hash generator

  1. 1Paste the text you want hashed.
  2. 2Read SHA-256 and SHA-1 as they appear.
  3. 3Copy SHA-256 when you want the digest on the clipboard.

What it won't do

  • SHA-256 and SHA-1 only. No MD5, no SHA-3, no HMAC.
  • Text input, not a file checksum utility.

Common questions

Why is there no MD5 option on the hash generator?

MD5 is not in the Web Crypto API, and adding a package to emit a broken digest would only help people put MD5 in new places. If a legacy system demands MD5, use the same environment that talks to that system, not this site.

Is the hash generator hashing UTF-8 or UTF-16?

UTF-8. The text is run through TextEncoder, then digested. That matches most command-line tools when they hash a UTF-8 file. It will not match a tool that hashed UTF-16LE bytes of the same characters.

Can I hash a file instead of pasted text?

Not on this page. A file hash has to read bytes, not a textarea. Dropping a binary into a text field would decode it as UTF-8 and hash the replacement characters. Different job.

Related tools

Why this one doesn't upload your file

There is no server to upload to. This page is a static file, and the work happens in your browser using the same graphics and WebAssembly code that renders every other site you visit. Your file is read from disk into memory, processed, and handed back as a download. Once the page has loaded you can disconnect from the network entirely and it keeps working. The longer explanation

Install the app