Password Hash Generator

Create MD5, SHA-1, SHA-256, SHA-512 or bcrypt fingerprints from any text. Developers use it to prepare test data, compare implementations and learn how secure password storage works.

How to use it

1. Type the text.
2. Choose an algorithm.
3. Generate and copy the result.

Which algorithm should I choose?

• MD5 and SHA-1 – fast and fine for checksums or legacy systems, but unsafe for storing login secrets.
• SHA-256 and SHA-512 – strong general-purpose functions for file integrity and signatures.
• bcrypt – deliberately slow and salted, built specifically for storing login credentials.

Why bcrypt looks different every time

It adds a random salt to each run, so the same text produces a new value each time. Verification still works because the salt is stored inside the result — try it with our Password Hash Checker.

Hashing vs encryption

A hash is one-way: it cannot be turned back into the original text. Encryption is two-way and can be reversed with the right key.

Stay safe

Use sample values, not real account credentials. In your own applications, store login secrets with bcrypt or Argon2 rather than fast functions like MD5.

A worked example

A developer writing automated tests needs a known bcrypt value for a test user. Generating one here and pasting it into the test database means the login tests run against realistic data without exposing any real credentials.

Typical output lengths

• MD5 – 32 characters
• SHA-1 – 40 characters
• SHA-256 – 64 characters
• SHA-512 – 128 characters
• bcrypt – about 60 characters, starting with $2y$

Other legitimate uses

1. Creating file checksums to confirm downloads were not corrupted.
2. Comparing outputs between two programming languages during a migration.
3. Teaching how one-way functions behave in a classroom or workshop.

In code

Most languages have built-in functions: PHP's password_hash() and password_verify(), Python's bcrypt package and Node.js's bcrypt library. Prefer these over writing your own logic.

Related tools

• Password Hash Checker – verify text against a stored value
• Password Generator – create random test secrets
• Password Strength Checker – test resistance to guessing

Step by step: creating test data for a login system

1. Choose a memorable test value such as Test-User-2026!.
2. Select bcrypt and generate the result.
3. Store the result in your test database for a dummy account.
4. Log in with the plain value to confirm the application verifies it correctly.
5. Never reuse test values for real accounts.

Salts and peppers explained

A salt is random data added to each value before hashing, so identical secrets produce different results and precomputed lookup tables are useless. bcrypt handles salts automatically. A pepper is an extra secret kept in the application's configuration rather than the database, adding protection if the database alone is stolen.

Checksums for files

SHA-256 is also widely used to confirm that a downloaded file has not been corrupted or tampered with. Software publishers often list the expected value next to the download link; compare it with the value you calculate on your own machine.