Skip to content
PBPasteBench

Hash Generator

SHA-1 through SHA-512 for any string, computed as you type.

SHA-1
SHA-256
SHA-384
SHA-512

Hashing runs through the browser’s built-in WebCrypto implementation, so your input is never sent anywhere. SHA-1 is included because older systems still ask for it — don’t use it for anything security-related.

Common questions

Can I use SHA-256 to store passwords?+

No. Fast hashes are the wrong tool for passwords precisely because they are fast — an attacker can try billions per second. Use bcrypt, scrypt, or Argon2, which are deliberately slow and salted.

Why is there no MD5 option?+

Browsers do not ship MD5 in their crypto API, and it is broken for anything security-related. Pulling in a third-party implementation to fill a row on the page was not worth it.

Why include SHA-1 if it is insecure?+

Because older systems still ask for it — Git object IDs, legacy integrations, some checksums. It is here for compatibility, and should not be used for anything where collisions matter.

More tools