MD5 and SHA-256 Hash Generator

Almost always the input differs in a way you cannot see. Check for a trailing newline or space you pasted along with the text, check the letter case, and check the encoding: this page hashes the string as UTF-8, while an older PHP script may have read it as windows-1251. Any of those changes every byte of the result, so compare the inputs, not just the digests.

No. The page has a single «Text» textarea and no file picker, so there is no way to checksum an ISO or an archive here. Use certutil -hashfile on Windows, sha256sum on Linux and macOS, or Get-FileHash in PowerShell. Pasting binary content into a text box will not give you the file's real digest.

You cannot. A hash function is one-way and has no inverse. The sites advertising "MD5 decryption" are looking your value up in precomputed dictionaries, which only works for short, common strings. If you need the original data back, what you want is encryption, not hashing.

Not where collision resistance matters — practical collisions have been published for both, so they must not sign documents or verify update packages. They are still fine as fast identifiers: cache keys, deduplication, or talking to a legacy API that insists on MD5. For anything security-related, choose SHA-256.

No, and this is the classic mistake. Fast hashes like SHA-256 can be brute-forced at billions of guesses per second on a GPU. Passwords need deliberately slow, salted functions: Argon2id, bcrypt or scrypt, or password_hash() and password_verify() in PHP. This tool is for checksums, not for an accounts table.

Yes. The string is encoded as UTF-8 before hashing, so accented letters, Cyrillic and emoji all work. Keep in mind that the same words in another encoding hash differently — «Привет» is twelve bytes in UTF-8 and six in windows-1251 — so confirm the other system's encoding before you compare results.

No. The hashing runs in JavaScript inside your tab using crypto-js, and the page makes no request carrying the contents of the field. The library itself is fetched from the cdnjs.cloudflare.com CDN, so you need a connection the first time you open the page, but your input is not part of that request.