Hash generator. Checksums that never leave your device.
or click to browse (any type, any size)
Files never leave your browser. Nothing is uploaded.
Checksums, without the command line
A cryptographic hash is a fixed-length fingerprint of your data, change one byte and the whole hash changes. Type or paste text and all four digests update live; drop in a file (an installer, a backup, a build artifact) and the tool reads it locally with a progress bar, then hashes it with the browser's built-in Web Crypto API. Paste a published checksum into the verify field and it instantly tells you which algorithm matches, the same job as sha256sum or shasum -a 512, with no terminal and no upload. Free forever, no account.
How to use the Hash Generator
This tool computes SHA-1, SHA-256, SHA-384 and SHA-512 hashes of text or a file at the same time. It uses your browser's built-in Web Crypto API, so it does the same job as sha256sum or shasum without a terminal. Use it to check that a download is intact, to compare two files, or to get a checksum a vendor or a docs page asks for.
Step by step
-
Choose Text or File
Use the Text tab to hash words you type or paste, or the File tab to hash a file. Switching tabs clears the results, and going back to Text hashes the text in the box again.
-
Hash some text
On the Text tab, type or paste into Text to hash. The four hashes update a quarter of a second after you stop typing. The line at the top right shows the size of the text in bytes (or KB and MB for longer text) and the number of characters.
-
Or hash a file
On the File tab, drop a file on the Drop a file box, or click it to browse. You can also focus the box and press Enter or Space. A progress bar shows the file being read, then the hashes appear along with the file name, size and type. One file is hashed at a time.
-
Copy the hash you need
Each algorithm has its own row with a Copy button. Press it to put that hash on your clipboard. SHA-256 is the usual choice when a site does not say which one it used.
-
Verify against a known checksum
Paste the checksum from the vendor's site into Verify against a known hash. The tool compares it with all four results and tells you whether it matches and which algorithm it matched.
Reading the result
- Each hash is shown as lowercase hexadecimal. SHA-1 is 40 characters long, SHA-256 is 64, SHA-384 is 96 and SHA-512 is 128.
- The same input always gives the same hash, and changing a single character changes the whole hash. Typing hello gives a SHA-256 hash that starts 2cf24dba.
- A green Match line names the algorithm whose hash equals the one you pasted. A red No match line means the pasted value equals none of the four.
- SHA-1 is marked legacy. It is still shown for comparing against old checksums, but it should not be relied on for security.
Tips and common mistakes
- Text is hashed as UTF-8 bytes. A trailing space or line break changes the hash, so copy exactly what you mean to hash.
- The verify box ignores spaces and capital letters, so a checksum pasted in uppercase or split across lines still matches.
- Only hexadecimal checksums can match. If a site publishes its hash in Base64, it will show No match here even when the file is fine.
- There is no MD5 option because the Web Crypto API does not offer it. If a site only publishes MD5, use another tool for that check.
- If the hash of a download does not match, download the file again before you assume it was tampered with. An incomplete or broken download gives a different hash too.
Privacy and limits
Hashing happens in your browser with the Web Crypto API. Your text and files are never uploaded and nothing is saved. The whole file is read into memory before it is hashed, so a very large file can fail on a device with little free memory.
Four algorithms, zero uploads.
Frequently asked questions.
Is the Hash Generator free?
Is it private? Are my files uploaded anywhere?
Does it work offline?
Which algorithms are supported?
Why is there no MD5 option?
How do I verify a downloaded file's checksum?
Published · Last updated .
