Generate hash values (MD5, SHA-1, SHA-256, SHA-512) from text or files
Verify downloaded file checksums
Hash passwords for storage
Compare data for equality
Create digital signatures
A hash is the output of a one-way function that converts data of arbitrary length into a fixed-length string. The same input always produces the same output, but it is computationally infeasible to recover the original input from the output. It is a key tool in security fields such as file integrity verification, password storage, and digital signatures.
MD5 generates a 128-bit (32-character hexadecimal) hash and is fast, but is not recommended for security purposes due to known collision vulnerabilities. SHA-256 generates a 256-bit (64-character) hash and is widely used for security purposes as it is currently considered secure. SHA-512 provides an even longer 512-bit hash for use when the highest level of security is required.
Hash functions are designed as one-way functions, making it theoretically impossible to recover the original data from a hash value. However, short or simple original data can be guessed using rainbow tables or brute-force attacks. To prevent this, a salt is added during password hashing so that even identical inputs produce different hash values.
For storing passwords, dedicated password hashing algorithms such as bcrypt, Argon2, or PBKDF2 are recommended over SHA-256 or MD5. These algorithms are intentionally slow, making brute-force attacks difficult. General hash functions are suitable for file integrity verification or data identification purposes.
A hash function transforms input data into a fixed-length output through mathematical operations. A good hash function exhibits the avalanche effect, where even a tiny change in input produces a dramatically different output. Thanks to this property, altering even a single byte in a file generates a completely different hash value, enabling instant detection of data tampering.
Hashing is a core component of modern security infrastructure. HTTPS certificates, code signing, and blockchain technology all rely on hash functions. Providing a SHA-256 checksum when distributing software allows users to verify that the downloaded file has not been tampered with.
MD5 (128-bit) is fast but should only be used for checksum verification due to security vulnerabilities. SHA-1 (160-bit) is also not recommended for new systems due to known collision vulnerabilities. SHA-256 and SHA-512 are currently considered secure standards, suitable for all security-sensitive purposes, and are widely used in TLS, digital signatures, and blockchain.