Hash Generator
Hash generator

Hashes and checksums, in one place.

Get the MD5, SHA-1, SHA-256, SHA-384, SHA-512 and CRC32 of any text or file at once. Paste an expected checksum to verify a download in seconds.

  • Files are hashed on your device and never uploaded.
  • All six hashes at once, plus HMAC with a key.
  • Paste a checksum to see which one matches.

    How it works

    A hash is a short fingerprint of data. Change one byte and the fingerprint changes completely.

    1. Add text or a file

      Type text, or choose a file of any type. Large files are read straight from your disk.

    2. Get every hash

      MD5, SHA-1, SHA-256, SHA-384, SHA-512 and CRC32 appear together. Add a key for HMAC signatures.

    3. Verify downloads

      Paste the checksum from a download page. The matching hash turns green, so you know the file is intact.

    Why use this one

    Small, fast and private: one page that does one job well.

    Six algorithms

    MD5, SHA-1, SHA-256, SHA-384, SHA-512 and CRC32, computed together.

    Files up to 512 MB

    Check ISO images, installers and backups without uploading them anywhere.

    Checksum compare

    Paste the expected value in any case, with or without spaces or an sha256: prefix.

    HMAC

    Enter a key to get HMAC-MD5 and HMAC-SHA signatures, as used by APIs and webhooks.

    Fast and native

    SHA hashes use the browser's built-in Web Crypto engine.

    Private

    Your text and files stay on your device. The site has no analytics.

    Frequently asked questions

    How do I verify a downloaded file?

    Click Hash a file and choose the download, then paste the checksum from the publisher's site into Compare with. If one of the hashes turns green, the file is exactly what they published.

    Which hash should I use?

    Use SHA-256 or SHA-512 for anything security-related. MD5 and SHA-1 are broken for security and should only be used to match old checksums. CRC32 only catches accidental damage.

    Can I use this to store passwords?

    No. Plain hashes are far too fast for passwords. Password storage needs a slow, salted method such as Argon2, scrypt, bcrypt or PBKDF2.

    What is HMAC?

    HMAC mixes a secret key into the hash, so only someone with the key can produce or check it. APIs and webhooks use it to sign requests.

    Are my files uploaded?

    No. Files are read and hashed inside your browser and never leave your device.

    More free tools

    Each one runs in your browser with no sign-up and no tracking.