Type text or choose a file and this tool calculates its MD5, SHA-1, SHA-256, SHA-384 and SHA-512 hashes at the same time. Text hashes update as you type, and output can be shown as lowercase hex, uppercase hex or Base64.
To check that a download is genuine and complete, paste the checksum published by the software vendor into the compare box: the matching algorithm lights up green. Files are read and hashed locally using the Web Crypto API, so even large or confidential files are never uploaded.
How to use the Hash Generator tool
- Choose Text and type, or choose File and drop a file.
- Read the five hashes in the table.
- Switch to uppercase or Base64 output if your system expects it.
- Paste an expected hash in the compare box to verify it.
- Copy any hash with its Copy button.
Why use ToolOrca Hash Generator
- MD5, SHA-1, SHA-256, SHA-384 and SHA-512
- Text and file hashing
- Checksum verification with highlight
- Hex or Base64 output
- UTF-8 text encoding
- Files never leave your device
Which hash algorithm should I use?
SHA-256 is the modern default for checksums, digital signatures and data integrity. SHA-384 and SHA-512 offer longer outputs and are common in TLS and subresource integrity (SRI) attributes.
MD5 and SHA-1 are broken for security: attackers can create two different inputs with the same hash. They are still fine for non-security uses, such as spotting accidental file corruption, cache keys or matching legacy checksums.
Hashing is not encryption
A hash is a one-way fingerprint: the same input always gives the same output, but you cannot turn the hash back into the input. Changing a single character changes the whole hash. For storing passwords, do not use plain MD5 or SHA-256; use a slow, salted algorithm such as bcrypt, scrypt or Argon2.
Frequently asked questions
How do I verify a downloaded file?
Choose File, drop the downloaded file, and paste the checksum from the official website into the compare box. A green “Match” means the file is identical to the original.
Why is my hash different from another tool?
Usually the input differs: a trailing space or line break, Windows (CRLF) versus Unix (LF) line endings, or a different text encoding. This tool hashes text exactly as typed, encoded as UTF-8.
Can an MD5 or SHA-256 hash be decrypted?
No. Hashes cannot be reversed. Websites that claim to “decrypt” MD5 only look up common inputs in precomputed tables, which is why short or common passwords should never be stored as plain hashes.
Is there a file size limit?
The file is loaded into memory, so files up to a few hundred megabytes work well on most computers. Nothing is uploaded, so your connection speed does not matter.
What is the MD5 hash of an empty string?
d41d8cd98f00b204e9800998ecf8427e. For SHA-256 it is e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855.