Which algorithm should I use for password storage?

bcrypt, because it is intentionally slow and incorporates a salt, which resists brute-force and rainbow-table attacks. General-purpose hashes like SHA-256 are unsuitable for passwords on their own. For production, hash on the server with an appropriate bcrypt cost factor.

Are MD5 and SHA-1 safe to use?

They are fine for non-security checksums where you only need a quick fingerprint, but both are considered broken against deliberate tampering. Use SHA-256 or SHA-512 whenever collision resistance matters.

Why does bcrypt produce a different hash every time?

bcrypt generates a random salt for each run and embeds it in the output, so the same input yields different strings. Verification works because the salt is read back out of the stored hash during comparison.

Is my input sent to a server?

No. Hashing and verification happen entirely in your browser, so the text you enter is never uploaded or stored remotely.

How do I verify a file's integrity with this?

If you have the file's text content or a representation of it, hash it with the same algorithm the publisher used (commonly SHA-256) and compare against their published checksum using the verify tab.

Hash Generator & Verifier

Generate MD5, SHA-1, SHA-256, SHA-512, and bcrypt hashes. Verify strings against known hashes. Use the tabs below to generate or verify hashes.

Input

Enter the text you want to hash.

Bcrypt Options

Configure the cost factor (rounds) for bcrypt hashing.

Rounds: 10

Performance Note

Higher bcrypt rounds increase security but are significantly slower, especially in the browser. 10-12 is typical.

Generated Hashes

Results for various algorithms.

MD5

MD5 is cryptographically broken and should not be used for security purposes (like passwords).

SHA-1

SHA-1 is considered weak and should be avoided for security applications.

SHA-256

SHA-512

bcrypt

About Hash Generator & Verifier

Hashes turn arbitrary input into a fixed-length fingerprint, and developers reach for them constantly — to checksum a download, key a cache, deduplicate records, or store a password derivative. This tool generates MD5, SHA-1, SHA-256, SHA-512, and bcrypt hashes from any text you provide, and can verify a string against a hash you already have so you can confirm a match without manual comparison.

The right algorithm depends on the job. SHA-256 and SHA-512 are the dependable choices for integrity checks and content addressing. MD5 and SHA-1 still appear in legacy systems and non-security checksums but are broken for anything that must resist tampering. bcrypt is purpose-built for passwords because it is deliberately slow and salted, which is exactly what you do not want from a general-purpose checksum. The tool keeps all of these in one place so you can pick the appropriate one per task.

Hashing runs locally in your browser, so the values you enter — including anything sensitive — are never transmitted. That makes it safe for quick verification work, though for production password storage you should always hash on the server with a properly configured bcrypt cost factor.

How to use Hash Generator & Verifier

Enter your input
Type or paste the text you want to hash into the input field.
Choose an algorithm
Select MD5, SHA-1, SHA-256, SHA-512, or bcrypt depending on whether you need a checksum or a password hash.
Read or copy the hash
The generated hash appears instantly; copy it for use in a checksum, cache key, or comparison.
Verify a match
Switch to the verify tab, paste a known hash, and confirm whether your input produces the same value.

Frequently asked questions

Base64 Encoder / Decoder

Encode text or files to Base64, or decode Base64 back to its original form. Supports text input and file drag-and-drop.

UUID Generator & Validator

Generate v1 or v4 UUIDs, validate existing ones, detect versions, and inspect v1 timestamps.

Password Generator and Validator

Generate and validate cryptographically secure passwords and test password strength using zxcvbn. Includes customizable options for uppercase, numbers, and symbols with real-time strength analysis.