Generators

Hash Generator

Generate SHA-1, SHA-256, SHA-384, and SHA-512 hashes from any text. Shows all four algorithms at once in hex or Base64 — powered by the Web Crypto API.

SHA-1 / SHA-256 / SHA-384 / SHA-512
Hex & Base64
All Algorithms at Once
Web Crypto API
Browser-only

Input text

Output encoding

Enter text and generate hashes

Cryptographic hash generator

A cryptographic hash turns arbitrary input into a fixed-length digest. The same input always produces the same result, while a tiny input change produces a substantially different digest.

Supported algorithms

Algorithm	Digest size	Guidance
SHA-1	160 bits	Legacy integrity checks only
SHA-256	256 bits	General integrity and signatures
SHA-384	384 bits	Higher security margin
SHA-512	512 bits	Large security margin

const bytes = new TextEncoder().encode("hello");
const digest = await crypto.subtle.digest("SHA-256", bytes);

Hex is convenient for logs and checksums. Base64 is shorter for transport. Hashing is not encryption: digests are not designed to be decrypted, and passwords require a salted password-hashing function such as Argon2 or bcrypt.

Privacy

The tool calls the browser Web Crypto API. Text is not uploaded or stored by this page.

Frequently Asked Questions

What hash algorithms are supported?: The tool supports SHA-1, SHA-256, SHA-384, and SHA-512 via the browser's built-in Web Crypto API. These are standardized cryptographic hash functions. MD5 is not supported as it is cryptographically broken and no longer recommended.
Is my input data sent to a server?: No. All hashing is performed entirely in your browser using the Web Crypto API (crypto.subtle.digest). Your input text never leaves your device.
What is the difference between SHA-256 and SHA-512?: Both are part of the SHA-2 family. SHA-256 produces a 256-bit (64 hex characters) output and is the most widely used for general purposes and Bitcoin. SHA-512 produces a 512-bit (128 hex characters) output and provides a higher security margin, especially useful for password hashing schemes.
Can hashes be reversed?: No. Cryptographic hash functions are one-way - it is computationally infeasible to reverse a hash back to the original input. This property is called 'pre-image resistance'. Hashes can only be 'cracked' by trying many inputs (dictionary or brute-force attacks).
What is HMAC?: HMAC (Hash-based Message Authentication Code) is a construction that combines a hash function with a secret key to produce a message authentication code. It is used to verify both data integrity and authenticity. This tool generates plain hashes, not HMACs.
What are common uses for SHA-256?: SHA-256 is used in TLS/SSL certificates, code signing, file integrity verification, Bitcoin's proof-of-work, and as a building block in many security protocols (e.g. JWT, OAuth).
Should I use hexadecimal or Base64 output?: Hexadecimal is convenient for logs and checksums, while Base64 is more compact for transport. Both encodings represent the same digest.
Can I use a hash as encryption or for password storage?: No. Hashing is not encryption: digests are not designed to be decrypted. Passwords should use a salted password-hashing function such as Argon2 or bcrypt.
Which hash algorithm should I use?: Use SHA-256 or SHA-512 for new integrity work. SHA-1 is retained for compatibility with legacy systems and should not protect collision-sensitive data.
Is my input stored in the browser?: Text is processed with the browser Web Crypto API and is neither uploaded nor stored by this page.

Disclaimer

This tool is provided for general informational and utility purposes only. Results may be inaccurate, incomplete, outdated, or contain errors. Always verify results before relying on or using them.

Some tools may use AI, automated processing, third-party services, or server-side processing. Do not rely on these tools as a substitute for professional advice.

Use at your own risk. BestToolOnline makes no guarantees regarding the accuracy, reliability, completeness, availability, or suitability of results, to the maximum extent permitted by applicable law.

See our Terms of Service and Privacy Policy for complete details.

Loading tool...

Cryptographic hash generator

A cryptographic hash turns arbitrary input into a fixed-length digest. The same input always produces the same result, while a tiny input change produces a substantially different digest.

Supported algorithms

Algorithm

Digest size

Guidance

SHA-1

160 bits

Legacy integrity checks only

SHA-256

256 bits

General integrity and signatures

SHA-384

384 bits

Higher security margin

SHA-512

512 bits

Large security margin

const bytes = new TextEncoder().encode("hello"); const digest = await crypto.subtle.digest("SHA-256", bytes);

Privacy

The tool calls the browser Web Crypto API. Text is not uploaded or stored by this page.

Frequently Asked Questions

What hash algorithms are supported?

The tool supports SHA-1, SHA-256, SHA-384, and SHA-512 via the browser's built-in Web Crypto API. These are standardized cryptographic hash functions. MD5 is not supported as it is cryptographically broken and no longer recommended.

Is my input data sent to a server?

No. All hashing is performed entirely in your browser using the Web Crypto API (crypto.subtle.digest). Your input text never leaves your device.

What is the difference between SHA-256 and SHA-512?

Both are part of the SHA-2 family. SHA-256 produces a 256-bit (64 hex characters) output and is the most widely used for general purposes and Bitcoin. SHA-512 produces a 512-bit (128 hex characters) output and provides a higher security margin, especially useful for password hashing schemes.

Can hashes be reversed?

No. Cryptographic hash functions are one-way - it is computationally infeasible to reverse a hash back to the original input. This property is called 'pre-image resistance'. Hashes can only be 'cracked' by trying many inputs (dictionary or brute-force attacks).

What is HMAC?

HMAC (Hash-based Message Authentication Code) is a construction that combines a hash function with a secret key to produce a message authentication code. It is used to verify both data integrity and authenticity. This tool generates plain hashes, not HMACs.

What are common uses for SHA-256?

SHA-256 is used in TLS/SSL certificates, code signing, file integrity verification, Bitcoin's proof-of-work, and as a building block in many security protocols (e.g. JWT, OAuth).

Should I use hexadecimal or Base64 output?

Hexadecimal is convenient for logs and checksums, while Base64 is more compact for transport. Both encodings represent the same digest.

Can I use a hash as encryption or for password storage?

No. Hashing is not encryption: digests are not designed to be decrypted. Passwords should use a salted password-hashing function such as Argon2 or bcrypt.

Which hash algorithm should I use?

Use SHA-256 or SHA-512 for new integrity work. SHA-1 is retained for compatibility with legacy systems and should not protect collision-sensitive data.

Is my input stored in the browser?

Text is processed with the browser Web Crypto API and is neither uploaded nor stored by this page.

Disclaimer

Some tools may use AI, automated processing, third-party services, or server-side processing. Do not rely on these tools as a substitute for professional advice.