Free Online Hash Generator & Checksum

It supports SHA-1, SHA-256, SHA-384 and SHA-512, with SHA-256 selected by default. All four run through your browser's Web Crypto API. MD5, SHA-3, CRC32 and HMAC are not offered, so pick one of the four SHA options.

No. The Web Crypto API in browsers has no MD5, and this tool doesn't add a library for it. MD5 is also broken for security use. When a download page lists both, check the SHA-256 checksum instead, since it is the safer test.

Pick SHA-256 first, then click Hash a file and choose the download. Compare the result with the checksum on the publisher's page. Letter case doesn't matter, so ABC1 and abc1 match. Any other difference means the file is damaged or not the one they published.

Usually a hidden newline. echo hello | sha256sum hashes hello plus a line break, while this tool hashes only what is in the box. Use printf '%s' hello or echo -n hello instead. Line breaks typed in the box count as single LF characters.

Both belong to the SHA-2 family. SHA-256 gives a 256-bit digest, shown as 64 hex characters; SHA-512 gives 512 bits, or 128 characters. SHA-256 is the usual choice for checksums. SHA-512 has a larger margin and is often quicker on 64-bit chips.

Yes. The algorithm menu and the Uppercase box apply to the next hash only. The label above the result shows the current menu choice, so after a change click Generate Hash again. For a file, pick the file again, because Generate rehashes the text box.

Lowercase by default. Tick Uppercase output before you generate to get capitals, for example to match PowerShell's Get-FileHash. Hex is not case-sensitive, so 2CF24DBA and 2cf24dba are the same SHA-256 value.

No. A hash is one-way, not encryption, so no key turns it back into the text. People crack hashes only by guessing inputs and comparing results, which works on short or common passwords. That is why stored passwords need a slow hash such as bcrypt.

Not for signatures or certificates. In 2017, researchers made two different PDF files with the same SHA-1 hash. It still catches accidental damage, and Git uses it by default. Choose SHA-256 for anything new.

There is no set limit. The tool reads the whole file into memory and hashes it in one pass, so the ceiling is your device's free memory. Very large files, such as multi-gigabyte disk images, may fail when memory runs out, and there is no progress bar.

No. The tool skips input that is empty or only spaces, so no result appears. For reference, the SHA-256 of an empty string is e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855. Text with spaces around it is hashed exactly as typed.

Your text and files are hashed on your device and never sent to us. Analytics record clicks like Copy and the time a hash took, never your text or file. Still, a plain SHA hash is not a safe way to store passwords; use bcrypt or Argon2.