How to Generate MD5 and SHA Hashes Online

To generate a hash online, paste or type your text into the MD5 & Hash Generator and it instantly shows the MD5, SHA-1, SHA-256, SHA-384 and SHA-512 hashes of that exact text, computed right in your browser with nothing sent to a server.

What a hash actually is

A hash is a fixed-length string of letters and numbers produced by running text through a one-way mathematical function. The same input always produces the same hash, but you can't run the process backward to recover the original text from the hash — that's what makes hashes useful for checking that two pieces of text are identical without ever comparing the text itself. Changing even a single character in the input produces a completely different hash, which is what makes hashes good for spotting tampered files, mismatched downloads, or duplicate data.

MD5 and SHA-1 are the oldest and fastest of the five algorithms here, but both have known collision weaknesses and shouldn't be relied on for security-sensitive verification anymore — they're still fine for things like deduplication or cache keys, where speed matters more than cryptographic strength. SHA-256, SHA-384 and SHA-512 (the "SHA-2" family) are the ones used today for things like TLS certificates, software checksums and blockchain, and none have practical collision attacks.

How to generate a hash with Toolbench

1. Open the MD5 & Hash Generator.
2. Type or paste your text into the Input box. Every hash updates instantly as you type.
3. Pick an Algorithm — the default, All algorithms, shows all five labeled by name; choosing a single one (MD5, SHA-1, SHA-256, SHA-384 or SHA-512) shows just its hash with no label.
4. Turn on Uppercase if you need the hex digits in capitals instead of lowercase — this only changes letter case, not the hash itself.
5. Turn on Hash each line separately to hash every line of the input on its own instead of hashing the whole block of text as one string — handy for hashing a list of values at once.
6. Click Copy to grab the output, or use Send to → to pass it straight into another Toolbench tool.

Worked example

Typing hello world into the Input box with the default settings (All algorithms, Uppercase off, Hash each line separately off) produces:

MD5      5eb63bbbe01eeed093cb22bb8f5acdc3
SHA-1    2aae6c35c94fcfb415dbe95f408b9ce91ee846ed
SHA-256  b94d27b9934d3e08a52e52d7da7dabfac484efe37a5380ee9088f7ace2efcde9
SHA-384  fdbd8e75a67f29f701a4e040385e2e23986303ea10239211af907fcbb83578b3e417cb71ce646efd0819dd8c088de1bd
SHA-512  309ecc489c12d6eb4cc40f50c902f2b4d0ed77ee511a7c7a9bcd3ca86d4cd86f989dd35bc5ff499670da34255b45b0cfd830e81f605dcf7dc5542e93ae9cd76f

This is a well-known sanity check — if you ever see a different MD5 or SHA-256 for the literal text hello world, something about the input (like a trailing newline or a different character encoding) doesn't match.

Hashing a list of values

Turn on Hash each line separately to hash each line independently rather than hashing the whole input as one block. With All algorithms selected, every line becomes its own heading followed by its five indented hashes. For a single line like apple:

apple
  MD5     1f3870be274f6c49b3e31a0c6728957f
  SHA-1   d0be2dc421be4fcd0172e5afceea3970e2f3d940
  SHA-256 3a7bd3e2360a3d29eea436fcfb7e44c735d117c42d1c1835420b6b9942dd4f1b
  SHA-384 3d8786fcb588c93348756c6429717dc6c374a14f7029362281a3b21dc10250ddf0d0578052749822eb08bc0dc1e68b0f
  SHA-512 844d8779103b94c18f4aa4cc0c3b4474058580a991fba85d3ca698a0bc9e52c5940feb7a65a3a290e17e6b23ee943ecc4f73e7490327245b4fe5d5efb590feb2

If you instead pick a single algorithm — say SHA-256 — with Hash each line separately on, the output drops the labels and headings entirely and just lists one hash per input line, in order. Pasting:

apple
banana

produces:

3a7bd3e2360a3d29eea436fcfb7e44c735d117c42d1c1835420b6b9942dd4f1b
b493d48364afe44d11c0165cf470a4164d1e2609911ef998be868d46ade3de4e

That one-hash-per-line output is the easiest format to paste into a spreadsheet column next to your original list.

Algorithm reference

Algorithm	Output length	Still safe for security use?
MD5	32 hex characters (128 bits)	No — broken for collision resistance
SHA-1	40 hex characters (160 bits)	No — broken for collision resistance
SHA-256	64 hex characters (256 bits)	Yes
SHA-384	96 hex characters (384 bits)	Yes
SHA-512	128 hex characters (512 bits)	Yes

Tips and common mistakes

• Hashing isn't encryption. A hash can't be reversed back into the original text, and there's no password or key involved — it's a one-way fingerprint, not a way to hide or protect the content itself.
• Don't hash passwords this way for storage. MD5, SHA-1 and plain SHA-256/384/512 are all fast general-purpose hashes, which makes them a poor fit for password storage — a password hashing function like bcrypt or Argon2 is deliberately slow to resist brute-force guessing. This tool is for checksums and comparisons, not for building a login system.
• Blank lines are skipped in line mode, but whitespace-only lines aren't. With Hash each line separately on, completely empty lines are dropped before hashing, but a line containing only a space still gets its own hash — make sure you know which lines were in your paste.
• Uppercase only changes letter case. Turning on Uppercase doesn't change the hash value, just whether the hex digits print as A-F or a-f. Some systems expect one case or the other when comparing checksums, so match whatever you're checking against.
• A different result usually means different input, not a bug. Extra whitespace, a trailing newline, or a different text encoding all change the hash completely, even if the visible text looks identical.

Related tools

• Text Diff — compare two hash strings (or any two pieces of text) character by character if they don't match and you need to find exactly where they differ.
• Base64 / URL Encode — encode or decode text, as opposed to the one-way hashing this tool does.
• UUID Generator — generate random unique identifiers, rather than deterministic hashes of existing text.
• Password Generator — create a strong random password instead of hashing one.

Frequently asked questions

Can I turn a hash back into the original text?

No. Hashing is a one-way function — there's no way to reverse a hash back into its original input. That's intentional: hashes are meant to verify that text matches, not to store or hide it.

Why would MD5 and SHA-256 give different results for the same text?

They're different algorithms that each produce a hash of a different fixed length — MD5 always outputs 32 hex characters and SHA-256 always outputs 64, no matter what you hash. Getting different-looking output from each algorithm is expected and doesn't indicate a problem.

Is my text uploaded anywhere to generate the hash?

No. All five hashes are computed directly in your browser as you type. Nothing you type into the tool is sent to a server.

Why did I get a completely different hash than I expected?

Hashes are extremely sensitive to the exact input — a trailing space, an extra newline, or different line endings all change every bit of the output. Double-check that you're comparing the exact same text, including any invisible whitespace.

Should I use MD5 for checking file integrity?

MD5 still works for catching accidental corruption or confirming a file you downloaded matches a lowercase hex string someone published, but it's not safe against someone deliberately crafting a different file with the same hash. For anything security-sensitive, use SHA-256 or higher.