Hash Generator (MD5, SHA-1, SHA-256, SHA-512)

Whatever you type is hashed four ways at once and each result has its own copy button. MD5 is calculated by a small script in the page; SHA-1, SHA-256 and SHA-512 come from the browser's Web Crypto API. All four read your text as UTF-8 and print lowercase hex. For the classic test sentence The quick brown fox jumps over the lazy dog:

Add a full stop to the end of the sentence and all four change completely; the SHA-256, for example, becomes ef537f25….

When you inherit a database column or a config value labelled only "hash", count its characters. A hex string of 32 characters is probably MD5, 40 is SHA-1, 64 is SHA-256 and 128 is SHA-512. Then confirm: take a value you know went in, such as a test user's email, type it here and see which of the four rows matches.

No match on any row usually means the stored value isn't a plain hash of that text. Common reasons are a salt or secret added before hashing, the input being lowercased or trimmed first, several rounds of hashing, or Base64 output instead of hex. A padded Base64 SHA-256 is 44 characters and ends in =.

• Git commit and file IDs are 40-character SHA-1 values in most repositories, but Git hashes a short header together with the content. Typing a file's text here won't reproduce its Git ID.
• Password hashes from login systems usually start with a marker such as $2b$ or $argon2. These are slow, salted algorithms that this page doesn't compute.
• Signed values such as webhook signatures are HMACs. They use one of these algorithms internally but also need the secret key.

For migrations, this page is handy for spot checks: hash a sample record with both the old and the new algorithm and confirm that each matches what the old and new code store.