About Hash Generator
Hash Generator calculates the MD5, SHA-1 and SHA-2 fingerprints of any text or file. Use it to verify that a download wasn't corrupted or tampered with, to compare files, or to generate checksums for your own releases.
What is a hash?
A hash function turns any input into a short, fixed-length string, like a digital fingerprint. The same input always gives the same hash. Changing a single character gives a completely different one. Hashes are one-way: you can't reconstruct the input from the hash. That's what makes them useful for checking integrity and storing data securely.
Which algorithm should you use?
- SHA-256: the modern standard for checksums, software downloads, certificates and blockchains. Use it by default.
- SHA-384 / SHA-512: longer hashes with an even larger security margin.
- SHA-1: still seen in older systems and Git, but broken for security since 2017.
- MD5: fast and still common for quick file checks, but unsafe against deliberate tampering.
How to verify a download
Many software publishers list a checksum (often SHA-256) next to the download link. Drop the downloaded file into the File tab and paste the published checksum into the verify box. If the hash matches, the file is byte-for-byte identical to the original. If it doesn't, download it again from the official source and don't run it.
How it works
SHA algorithms use your browser's native Web Crypto API, which is fast and well tested. MD5 isn't available in Web Crypto, so it's computed with a dedicated implementation. Files are read locally and never uploaded, so you can hash private documents and large installers safely.
Note for developers: don't store passwords as plain SHA or MD5 hashes. Use a slow, salted password hashing algorithm such as Argon2, bcrypt or scrypt.