How to use Hash Generator
- Choose Text and type, or choose File and drop in any file.
- Every hash appears at once. Switch between lowercase hex, uppercase HEX and Base64.
- To verify a download, paste the checksum from the website into Check against a known hash.
About this tool
A hash function turns any amount of data into a short, fixed-length fingerprint. Change a single byte and the fingerprint changes completely, which makes hashes ideal for checking that a file arrived intact and has not been tampered with.
SHA-256 is the standard choice today. SHA-384 and SHA-512 are longer members of the same family. MD5 and SHA-1 are still common for checksums but are broken for security purposes, because attackers can create two different files with the same hash. CRC-32 is a quick error check used inside ZIP and PNG files.
With a secret key, the tool computes an HMAC, which proves that a message came from someone who knows the key. APIs and webhooks often use HMAC-SHA256 to sign requests.
Files are read and hashed inside your browser, so even large or private files never leave your device.
Questions and answers
How do I check a file's checksum?
Choose File, drop the file in, then paste the checksum from the download page into "Check against a known hash". A green match means the file is exactly what the publisher released.
Can a hash be reversed?
No. Hashes are one-way. Short or common inputs can sometimes be found by guessing, which is why passwords need slow, salted hashes such as bcrypt or Argon2, not plain SHA-256.
Should I use MD5?
Only to compare against an existing MD5 checksum. For anything new, use SHA-256.
Is my file uploaded?
No. It is read and hashed on your device. Nothing is sent to a server.