At One Place

Hash generator

Computed by your browser's Web Crypto. Nothing is transmitted.

SHA-1, SHA-256, SHA-384 and SHA-512 hashes of any text, computed in your browser.

How it works

Computes cryptographic hashes using the browser’s built-in Web Crypto implementation. Nothing is transmitted.

A hash is one-way by design. There is no operation that recovers the input, and any site offering to "decrypt" a hash is either looking it up in a table of precomputed common inputs or guessing. That is exactly why unsalted hashes of passwords are inadequate — common passwords are all in those tables already.

MD5 and SHA-1 are both broken for security purposes: practical collision attacks exist, meaning two different inputs can be made to produce the same hash. They remain fine as checksums against accidental corruption, which is a different problem. SHA-256 and above are the ones to use where it matters.

Note that a hash is not encryption. Encryption is reversible with a key; hashing is not reversible at all.

This tool runs entirely in your browser. Nothing you enter is sent to a server, logged or stored, and the page keeps working with the network disconnected.

Common questions

Can you reverse a hash?
No. Hashing is one-way. Sites claiming to decrypt hashes are looking the value up in a table of precomputed common inputs.
Is SHA-1 still safe?
Not for security. Practical collision attacks against it were demonstrated in 2017. It is still adequate as a checksum against accidental corruption.
Why is MD5 not offered here?
It is broken for security use and the Web Crypto API deliberately does not implement it. SHA-256 or better is the right choice for anything that matters.

Related pages

Sources

  1. Calculated on this page — At One Place

How these figures are compiled and checked