Hash Generator

Overview

Paste text or drop a file and get MD5, SHA-1, SHA-256, SHA-384 and SHA-512 together, each with a copy button. Paste a published checksum into the compare field and it tells you plainly whether it matches, so you don't have to read two long strings side by side. It runs in your browser, so your file stays on your computer.

Checking a downloadHash the file and paste the publisher's checksum to see if it matches.
Any checksum formatCopy MD5, SHA-256 or SHA-512, whichever one is asked for.
Spotting a changeHash a file before and after a move or backup to confirm nothing changed.
Stable IDsTurn text or a file into a fixed-length key for deduplication or cache busting.
Old checksum listsCheck against MD5 or SHA-1 lists that older projects still publish.

Guides

01 How to check a file against its checksum

Set

Security Tools 26

Neighbours

01 AES File & Text Encryptor 02 Base64 Decode 03 Base64 Encode 04 CSR Generator 05 DER to PEM Converter 06 JWT Sign

Specification

Command: security.hash_generator
Set: Security
Input: MIXED
Output: PLAIN
Max file: 100MB
Batch: single file

PLAIN OCTET-STREAM

Runtime

Engine: WebCrypto · OpenPGP.js
Threads: single
Isolated: —
WebGPU: —
Memory: —

Transport 0 B

Your file is opened, worked on and saved inside this tab. This tool has no upload step, so your file has nowhere else to go.

Keys

Search: ⌘K
Panels: ⌘1 · ⌘2
Full width: F
All keys: ⌘/

How it works

Paste text or drop a file

Type or paste text, or drop a file; it's read in your browser.

Read all five hashes

MD5, SHA-1, SHA-256, SHA-384 and SHA-512 appear together, each with its own copy button.

Compare with a checksum

Paste the checksum line from a download page (sha256sum, shasum, certutil or BSD md5 output all work) and see match or no match.

Frequently asked

Which of the five digests should I use?

Use whichever one the other side published; you get all five anyway. SHA-256 is the usual choice today. MD5 and SHA-1 are there because older release pages still list them.

Are hash functions reversible?

No. A hash is one-way, so you can't rebuild the input from it. A short or guessable input can still be found by trial, which is why passwords need a slow, salted function like bcrypt or argon2.

Why would I hash something?

Mostly to check that a file didn't change. A publisher posts the SHA-256 of a download, you compute your own, and they match or they don't. The same works for backups, edited config files and stable content IDs.

Is my data secure during hashing?

Yes. Text and files are hashed in your browser, and neither the input nor the results are sent anywhere.

Can two different inputs have the same hash?

For SHA-256 and up, no collision has ever been found. For MD5 and SHA-1, collisions have been made on purpose, so use those only to catch accidental corruption, not tampering.

Keys

Search: ⌘K
Panels: ⌘1 · ⌘2
Full width: F
All keys: ⌘/