Hash generator and checksum checker

Get MD5 and SHA hashes of text or a file, and check downloads against their checksum.

Text File

Text to hash

Hashes

Uppercase

MD5: —
SHA-1: —
SHA-256: —
SHA-384: —
SHA-512: —

Compare with an expected hash (optional)

What it does

A hash is a short fingerprint of some data: change a single byte and the hash changes completely. Use this tool to get the MD5, SHA-1, SHA-256, SHA-384 and SHA-512 hashes of text or a file in one go, or paste the checksum published next to a download to confirm your copy is complete and unchanged. Files are read by your browser and never uploaded, which matters when you’re checking installers, backups or private documents.

How to use it

How it works

Choose “Text” and type or paste, or choose “File” and pick the file you want to check.
MD5, SHA-1, SHA-256, SHA-384 and SHA-512 are calculated at once, in your browser.
To verify a download, paste the checksum from the website into “Compare”. It tells you which hash matches, or that none does.

Common uses

Verifying that a downloaded installer or disk image matches the SHA-256 checksum on the official site
Checking that a backup or a copied file is identical to the original
Getting the hash of a string for a cache key, an ETag or a test fixture

Tips

Use SHA-256 to verify downloads. MD5 and SHA-1 still catch accidental damage, but they can be forged on purpose.
Never store passwords as a plain MD5 or SHA hash. Use a password hashing function such as Argon2, bcrypt or scrypt.
Text is hashed as UTF-8, exactly as typed, so an extra space or a different line ending gives a different hash.

Questions

Are my files uploaded?

No. The file is read and hashed by your browser on your device. That’s also why there’s a size limit: files up to 512 MB can be hashed, and very large disk images are better checked with your system’s own tools (shasum on macOS and Linux, certutil on Windows).

Why is my hash different from the one on the website?

Either the file differs, for example because the download was interrupted, or the site lists a different algorithm. The Compare box checks all five algorithms at once and tells you which one, if any, matches.

Can a hash be reversed to get the original text?

No. Hashes are one-way. Short or common inputs can still be found by guessing, which is why hashes alone shouldn’t protect passwords.

Related tools

JSON formatter and validator
Format, validate and minify JSON in your browser. Clear errors with line and column, big numbers kept exact, duplicate keys flagged. No upload.
JWT decoder and verifier
Decode a JWT to read its header, payload and expiry, and check its signature with a secret or public key. Runs in your browser; the token stays private.
Base64 encoder and decoder
Encode text or files to Base64 and decode Base64 back, with proper UTF-8, URL-safe Base64 and file detection. Free, in your browser, no upload.
URL encoder and decoder
Percent-encode text for URLs and query strings, or decode %20-style escapes back to text. Handles UTF-8, + for spaces and splits URLs into parts.
UUID generator
Generate UUID v4 or v7 values, one or a thousand at once, with the browser’s secure random generator. Check any UUID’s version and creation time.
Compress images
Shrink image file size without visible quality loss. Private, fast, free.