Hash Generator
Create SHA-1, SHA-256, SHA-384 and SHA-512 hashes of any text or file. Use it to check that a download matches the checksum published by the vendor, so you know the file wasn't tampered with.
How to verify a download
Software vendors often publish a SHA-256 checksum next to the download link. Choose the downloaded file below, paste the published checksum into the compare box, and the tool tells you whether it matches. If it does not, delete the file and download it again from the official site.
Files are read locally by your browser; large files may take a few seconds.
Which algorithm should I use?
Use SHA-256 or stronger. SHA-1 is shown only for compatibility with older checksums — it is no longer considered collision-resistant. MD5 is not offered for the same reason. Note that a fast hash like SHA-256 is not suitable for storing passwords; password storage needs a slow algorithm such as Argon2 or bcrypt.
Frequently asked questions
Can a hash be reversed?
No. A cryptographic hash is one-way. Short or common inputs can still be guessed by trying candidates, which is why passwords need slow, salted hashing.
Is my file uploaded?
No. The file is read and hashed inside your browser using the Web Crypto API.
Why does my hash not match?
Make sure you compare the same algorithm, that the file finished downloading, and that you copied the published checksum without spaces.
More free security tools
Advertisement