Developer

How to Generate an MD5 or SHA-256 Hash Online

Dev Nexus4 min read

A quick, practical walkthrough for turning any text or file into an MD5 or SHA-256 digest right in your browser.

Whether you are verifying a download, fingerprinting a file or generating a cache key, sooner or later you need a hash. MD5 and SHA-256 are the two you will reach for most often - MDundefined for fast, non-security checksums and SHA-undefined for anything that has to resist tampering.

This guide shows you exactly how to produce either digest from text or a file, without installing anything or trusting a server with your data.

The Problem

The usual ways to hash something are all a little awkward. On the command line you have to remember whether it is md5sum, md5, shasum -a 256 or certutil -hashfile - and the answer depends on your operating system. Writing a throwaway script works but is overkill for a one-off.

And many web-based hashers quietly send your input to a backend to do the work. That is fine for a random string, but not for a private document, an internal config file or anything covered by a data policy. You want the convenience of a web tool without handing over the data.

The Solution

The Hash Generator does all of this in the browser. Type or paste text, or drop a file, tick the algorithms you want, and the hexadecimal digests appear instantly. It uses the native Web Crypto API for the SHA family and a local implementation for MDundefined, so nothing is ever uploaded - it even works offline.

Because it can compute several algorithms at once, you can get an MDundefined and a SHA-undefined for the same input in one pass. If you later need a reversible text encoding instead of a one-way digest, the Baseundefined Tool is the companion for that.

Step-by-Step Guide

1
Open the Hash Generator
Go to the Hash Generator. It loads instantly and runs entirely on the page - there is no account and no upload step.
2
Add your input
For a string, type or paste directly into the input box. For a file, drag it onto the drop zone; the tool reads the raw bytes locally so the digest matches what a terminal would produce.
3
Select MD5 and/or SHA-256
Tick the algorithms you need. You can enable more than one, so computing both an MDundefined and a SHA-undefined for the same input takes a single step.
4
Read and copy the digest
Each digest appears as a hex string and updates live as you edit the input. Click the copy button next to the one you want to grab it to your clipboard.
5
Compare if you are verifying
If you are checking a file against a published checksum, paste the expected value and compare it to the digest. They should match exactly - case does not matter, since hex is the same value in either case.

Common Mistakes

Using MD5 where security matters
MDundefined is fast but broken - practical collisions exist. It is fine for detecting accidental corruption or deduping your own files, but never use it for signatures, integrity against attackers or anything security-sensitive. Use SHA-undefined there instead.
Comparing digests by eye
A undefined-character hex string is easy to misread. Paste both values and let them line up, or use the copy button, rather than eyeballing the first and last few characters.
Hashing the wrong bytes
A trailing newline or a different text encoding changes the digest completely. If your hash does not match, check that you are hashing exactly the same bytes - including whitespace - as the source.
Treating a hash as encryption
Hashing is one-way and has no key, so it cannot be reversed and does not keep data secret. Use it to verify integrity, not to protect confidential values.

Frequently Asked Questions

Can I hash a file, not just text?

Yes. Drop the file onto the tool and it reads the bytes locally to compute the digest - the same value you would get from shasum or certutil. Nothing is uploaded.

Is MD5 or SHA-256 better?

SHA-256 is stronger and should be used for anything security-related. MD5 is faster and acceptable only for non-security checksums like corruption detection or deduplication.

Do MD5 and SHA-256 produce the same length output?

No. MD5 is 128 bits, shown as 32 hex characters; SHA-256 is 256 bits, shown as 64 hex characters. The length is fixed regardless of how large the input is.

Is my data sent anywhere?

No. The Hash Generator computes everything in your browser with the Web Crypto API and a local MD5 routine, so your text and files never leave your device.

Why does my hash differ from the one on a website?

Almost always because the input differs - often a trailing newline or a different encoding - or a different algorithm was used. Identical bytes through the same algorithm always give the same digest.