TodayTools

Hash generator

Compare checksums after a download or a backup and be sure nothing changed.

PrivateNo uploadsRuns in your browser

Donate
Source

Working…

Smiling Man

For the downloaded file

Check that a file is the real one.

New download. Vineeth checks the file before he opens it.

BeforeHoping the file is fine

With sdevMatch the code, trust the file

  • Business People

    Matches

    The codes match, so it is safe.

  • Senior Couple

    Peace of mind

    He installs it and gets on with his evening.

How to hash text or a file

  1. Add the input

    Type or paste text, or switch to File and drop any file. An empty string is hashed too, which is handy for checking a library against known values.

  2. Choose algorithms and format

    Tick the digests you need from MD5, SHA-1, SHA-256, SHA-384, SHA-512 and CRC32. Switch the output to Base64 or Uppercase, or tick HMAC and enter a key to get keyed hashes.

  3. Copy or compare

    Each digest has its own copy button, and Ctrl+C (Cmd+C on Mac) with nothing selected copies them all, one per line. Paste a published checksum into Compare to see which algorithm it matches.

Good to know

  • Hashing runs in a web worker, so typing and scrolling stay smooth while a large file is processed. Results update about 100 ms after you stop typing.
  • Compare ignores case and accepts hex or base64, so a checksum copied from a download page matches whichever format is shown. The matching row turns green.
  • Text is hashed as UTF-8 bytes with no trailing newline. That matches printf in a terminal, not echo.
  • HMAC applies to MD5 and the SHA family. CRC32 has no keyed form, so it ignores the key.
  • Uppercase only applies to hex output. Base64 keeps its own case because it is part of the value.
  • Nothing leaves your browser. Files are read locally and never uploaded, so it works offline as well.

Where people use it

  • Check a download is safe

    Hash the file you downloaded and compare it with the code on the official page.

  • Spot changed files

    Two files with the same hash are the same. A different hash means something changed.

  • Sign a webhook

    Make an HMAC with your secret key to test a webhook or an API call.

  • Storing passwords?

    Use bcrypt for passwords, not a plain hash.

    Bcrypt generator

Why this one

It hashes big files right on your device and shows every common hash at once, so you can match whichever one is published.

  • MD5, SHA-1, SHA-256, SHA-384, SHA-512 and CRC32 together.
  • Files of any size, even very large ones.
  • Nothing is uploaded, so private files stay private.
  • No sign-up, works on phones.

What you can change

  • Text or file
  • Which hashes to show
  • HMAC with a key
  • Hex or base64, upper case

People find this page by searching

  • sha256 generator
  • md5 hash generator
  • hash generator online
  • file checksum online
  • sha256 checksum file
  • verify file hash
  • hmac generator
  • sha512 hash
  • crc32 calculator
Cite this tool
  • APA
    sdev.in. (n.d.). Hash generator [Web tool]. https://www.sdev.in/tools/hash-generator
  • MLA
    "Hash generator." sdev.in, https://www.sdev.in/tools/hash-generator.
  • Chicago
    sdev.in. "Hash generator." https://www.sdev.in/tools/hash-generator.
  • BibTeX
    @misc{sdev-hash-generator,
  title = {Hash generator},
  author = {{sdev.in}},
  howpublished = {\url{https://www.sdev.in/tools/hash-generator}},
  note = {Web tool}
}

Questions people ask

Why does my hash differ from the one in the terminal?

Usually a trailing newline: echo adds one, so echo text | sha256sum hashes an extra byte. Use printf '%s' text or echo -n. For files, make sure you compare the same algorithm and that the file was not changed by a line-ending conversion.

Which algorithm should I use?

SHA-256 for anything that matters, such as verifying downloads or signing. MD5 and SHA-1 are fast and still common in older checksum files, but collisions are practical, so do not rely on them for security. CRC32 only detects accidental corruption.

Can I hash a large file?

Yes. Files are read in your browser inside a web worker, so the page stays responsive. MD5 and CRC32 are streamed in chunks; SHA digests read the whole file into memory first, so very large files depend on how much memory the browser can give the tab.

What is HMAC?

A hash keyed with a secret. Only someone who knows the key can produce or check the value, which is how webhooks and API signatures prove a message is genuine. Tick HMAC and type the key; it is used as UTF-8 text.

Is my file uploaded?

No. Text and files are hashed on your device using the Web Crypto API and a local MD5 implementation. Nothing is sent anywhere.

Donate