| Function | Output | Status |
|---|
| MD5 | 128-bit | Broken (collisions) |
| SHA-1 | 160-bit | Deprecated (collisions) |
| SHA-256 | 256-bit | Secure (current) |
| SHA-3 | Variable | Secure (newest) |
Never use MD5 or SHA-1 for security purposes. SHA-256 is the current standard. SHA-3 uses a completely different construction (Keccak) — provides diversity if SHA-2 is weakened. bcrypt/Argon2 for password hashing (not general-purpose hashes).