MD5, SHA-1, SHA-256 and SHA-512 all take an input of any length and produce a fixed-length digest. The same input always produces the same hash, and changing a single character changes the output completely. This computes all four at once from any text, using the browser's built-in Web Crypto API for SHA-1/256/512, and lets you compare a hash you already have against freshly computed ones to confirm a match.
When you'd use this
Verifying a downloaded file's published checksum, checking that a config value or password hasn't been altered, or generating a deterministic identifier from a string for caching or deduplication.
The compare feature is the fast path for the common case: you have a hash from somewhere else and just need to know whether a given input produces the same one, without eyeballing two long hex strings character by character.
Common errors
A hash that doesn't match what you expected almost always means the input differs in some way you can't see on screen. Trailing whitespace, a different line-ending style (\r\n vs \n), or a different text encoding are the usual culprits, since hashing is byte-exact.
Frequently asked questions
Is MD5 safe to use for security purposes?
No. MD5, and to a lesser extent SHA-1, have known collision weaknesses and shouldn't be used for password storage or anything security-sensitive. It's here because it remains common for checksums and legacy compatibility checks, not as a recommendation for new security work. Where security matters, reach for SHA-256 or SHA-512.
Can two different inputs produce the same hash?
In theory, yes. A fixed-length hash can't uniquely represent infinite possible inputs, so collisions exist; for SHA-256/512, finding one is computationally infeasible with current methods. MD5 and SHA-1 have practical, demonstrated collision techniques, and that's why both count as broken for security use.
Does this send my text anywhere to compute the hash?
Nothing you type here is transmitted. SHA-1/256/512 are computed via the browser's native Web Crypto API, and MD5 via a client-side implementation, entirely on your own device.
API & Debugging Cluster
Often used together when debugging APIs.
JSON Formatter
Clean, format, parse, and validate JSON inputs with instant syntax lint warnings and code export.
JWT Debugger
Decode, verify, parse, and edit JWT token components including headers, payloads, and signatures.
Encoder / Decoder
Encode and decode standard Base64 translations, HTML escape entities, or URL navigation parameters.
Timestamp Converter
Convert Unix epoch timestamps to readable dates and back, in local time or UTC.
