Hash Generator (MD5, SHA-1, SHA-256, SHA-512)

Compute the main cryptographic hashes of a text or file at once to verify downloads, compare content or generate checksums.

Input

MD5

—

SHA-1

—

SHA-256

—

SHA-384

—

SHA-512

—

Use via API

Computes MD5, SHA-1, SHA-256, SHA-384 and SHA-512 of UTF-8 text.

POSThttps://enhanced.dev.br/api/v1/crypto/hash
JSON body parameters
Body (JSON)TypeDescription
text *stringInput text.

Request example

curl -X POST "https://enhanced.dev.br/api/v1/crypto/hash" \
    -H "Content-Type: application/json" \
    -d '{"text":"NT Tools"}'

Response

{
  "ok": true,
  "data": {
    "md5": "624306d517bd47b4a922d1a0ca643cdb",
    "sha1": "40b5683ef52a4340886da5da7983c31dfc52a410",
    "sha256": "0ba8a80d11a37907b28429ea9d3410bc3d95061b37af9e88ff57ea62a451057a",
    "sha384": "3ea96c95022b4a19080fc2f395d12b418062e196f1e3530c770b0c8c8d1688453816691b40d9c06d3ff74ceb7aad7fda",
    "sha512": "082f601a9eb62ca5a2eea8d94605b007d60b388487457d3b1f1a1119e9a577857fecc8a24843ffad481fcf678d339e70632d0cfd110010402df4faaf0eb7ed19"
  },
  "meta": {
    "version": "v1"
  }
}
  • Errors return { ok: false, error: { code, message } } with an HTTP 4xx/5xx status.
  • Free, no API key required. Limited to 120 requests per minute per IP.
  • CORS enabled: call it straight from the browser on any domain.

How to use

  1. Choose Text or File.
  2. Type the text or select the file; the hashes are recomputed automatically.
  3. Tick Uppercase if the target system expects uppercase hexadecimal.
  4. Copy the hash for the algorithm you need.

Use cases

  • Checking the SHA-256 checksum published alongside an ISO or installer.
  • Generating ETags and cache keys from content.
  • Comparing whether two files are identical without opening them.
  • Reproducing hashes for legacy integrations that still rely on MD5.

Technical concepts

Cryptographic hash functions

A hash function deterministically maps any input to a fixed-size output. A good one is preimage-resistant (you cannot recover the input from the hash) and collision-resistant (finding two inputs with the same hash is infeasible). Flipping a single bit changes the result completely.

MD5 and SHA-1 are broken

Practical collisions have been shown for MD5 (2004) and SHA-1 (SHAttered, 2017). They are still fine for non-adversarial checksums, but not for signatures, certificates or any scenario where an attacker can choose the input. Prefer SHA-256 or stronger.

Hashing is not password storage

SHA-256 is fast by design, which makes brute-forcing passwords easy. For passwords, use slow salted algorithms such as bcrypt, scrypt or Argon2.

Frequently asked questions

Is the file uploaded to compute the hash?

No. The browser reads the file and processes it with crypto.subtle.digest; MD5 uses a local JavaScript implementation.

Why does my hash differ from the one in my terminal?

Usually because of a trailing newline: echo adds \n. Use echo -n or printf to compare. Different encodings (UTF-8 vs Latin-1) also change the hash.

Can hashes be reversed?

Not mathematically, but short or common inputs can be found in precomputed tables. That is why passwords need salts and slow algorithms.

Related tools