KitJade
Developer ToolsRuns in your browser

Hash Generator

MD5 and SHA digests for text or files, computed locally.

Use the Hash Generator tool

Runs in your browserUpdated Report a problem

What this hash generator does

Hash Generator produces cryptographic digests for text or files. SHA-1, SHA-256, SHA-384 and SHA-512 use the browser's Web Crypto API, while MD5 is generated by a small JavaScript implementation for compatibility with legacy systems.

A hash is a fixed-length fingerprint. Change one character and the digest changes completely. Hashes are used for integrity checks, cache keys, content addressing and password storage — but fast hashes such as MD5 and SHA-256 are not suitable for hashing passwords; use Argon2id, scrypt or bcrypt instead.

Why use it

  • Verify that a downloaded file matches a published checksum.
  • Compute cache-busting keys or content hashes for build pipelines.
  • Compare two values without storing the original text.

How to use it

  1. 1Paste text, or drop a file into the file panel.
  2. 2Select one or more algorithms.
  3. 3Read or copy the hexadecimal digest.
  4. 4Recompute after any change — never assume a cached digest is current.

Worked examples

SHA-256 of a short string

Input

kitjade

Output

0f34ae8347e41173d799f68a52fef7122ba80bfc3e62c52289cb636d3df82707

Verify a download

Input

SHA-256 · app-v1.2.0.zip

Output

Compare with the vendor's published checksum, character by character.

A matching checksum is only meaningful if you trust the source that published it.

Common mistakes

  • Using MD5 or SHA-1 where collision resistance matters. Both are broken for security purposes.
  • Hashing passwords with SHA-256 alone — GPU cracking is far too fast.
  • Comparing hashes with a normal string equality in application code instead of a constant-time comparison.

Frequently asked questions

Which hash should I use?
Use SHA-256 for general integrity checks, SHA-512 for larger security margins, and Argon2id or bcrypt for passwords. MD5 is provided only for legacy compatibility.
Why is MD5 still offered?
Many older systems publish MD5 checksums, and developers need to match them. It should not be used for new security-sensitive designs.
Can I reverse a hash?
No. Hashing is one-way. Short or common inputs can be found by guessing, which is why salting and slow password hashes matter.

Related tools

All tools

JWT Decoder

Read JWT claims and optionally verify HMAC signatures.

Runs locally

Base64 Encoder

UTF-8-safe Base64 encoding, including URL-safe mode.

Runs locally

Password Generator

Cryptographically secure passwords with entropy scoring.

Runs locally

JSON Formatter

Beautify or minify JSON, with precise error positions.

Runs locally