Hash Generator
SHA-1, SHA-256, SHA-384, SHA-512 of any text, via the browser's crypto engine.
A hash turns any input into a fixed-length fingerprint, and it only works one way — you cannot run it backwards to recover the original. That property is what makes hashes useful for verifying downloads, storing passwords and spotting tampering, and it is why "we hashed it" and "we encrypted it" mean very different things.
How to use it
- Type or paste anything into Text to hash.
- Read the digests generated for the input.
- Change one character and watch every digest change completely — that is the avalanche effect.
What to take away
The same input always gives the same hash
This is why hashes verify downloads. Publish the hash, and anyone can confirm their copy matches yours byte for byte.
Hashing a password is not enough on its own
Attackers precompute hashes of common passwords. Real password storage needs a unique salt per user and a deliberately slow algorithm such as bcrypt, scrypt or Argon2 — never a raw SHA-256.
Frequently asked questions
Can a hash be reversed back into the original text?
Not directly. But if the input was short or predictable — a common password, a short number — an attacker can simply hash billions of guesses and compare. That is not reversing the hash, it is outrunning your input space, and it works just as well.
Why do MD5 and SHA-1 still appear if they are broken?
They are broken for security — collisions can be produced deliberately — but still fine as non-security checksums, and you will meet them constantly in old systems and CTF challenges. Recognising them matters; trusting them does not.
What is the difference between hashing and encryption?
Encryption is reversible with the right key, because the point is to get the data back. Hashing is deliberately one-way, because the point is to prove something matches without storing it.
Where this fits in the course
This security tool pairs with Path 06 — Cryptography — see all 26 learning paths.
It runs entirely in your browser: nothing is uploaded, no account is needed, and it is free.
Related
- Hash Identifier — Paste a hash and get likely algorithms, guessed from its length and character set.
- Password Cracking Lab — Four hashed passwords, one wordlist. See exactly which ones fall to a dictionary attack and which survive it — and why.
- Entropy Calculator — Shannon entropy of any text — a genuine static-analysis signal for spotting packed or encrypted data.
- Password Strength — Rough entropy and crack-time estimate for a password, with feedback.