Skip to main content

Hash generator

Generate MD5, SHA-1, SHA-256, SHA-384 and SHA-512 from text or a file, hash a whole batch of files at once, or check a download against the checksum its publisher listed. Everything is computed in this tab.

Free & unlimited
Source
Input text
11 chars · 11 bytes
Result
MD5
128-bit
5eb63bbbe01eeed093cb22bb8f5acdc3
SHA-1
160-bit
2aae6c35c94fcfb415dbe95f408b9ce91ee846ed
SHA-256
256-bit
b94d27b9934d3e08a52e52d7da7dabfac484efe37a5380ee9088f7ace2efcde9
SHA-384
384-bit
fdbd8e75a67f29f701a4e040385e2e23986303ea10239211af907fcbb83578b3e417cb71ce646efd0819dd8c088de1bd
SHA-512
512-bit
309ecc489c12d6eb4cc40f50c902f2b4d0ed77ee511a7c7a9bcd3ca86d4cd86f989dd35bc5ff499670da34255b45b0cfd830e81f605dcf7dc5542e93ae9cd76f
All processing happens in your browser. No data is sent to any server.

Type or paste text, drop in a file, or drop in twenty files, and get all five digests at once: MD5, SHA-1, SHA-256, SHA-384 and SHA-512. The second mode adds the job the separate file-hash page used to do — paste the checksum a download page published and it tells you which file and which algorithm it matches, or that nothing does. The bytes are read by this tab and hashed here; no file is uploaded at any point.

Key facts about Hash generator

Key facts about Hash generator
AlgorithmsMD5 (128-bit), SHA-1 (160), SHA-256 (256), SHA-384 (384), SHA-512 (512) — all five computed together
ImplementationSHA family via the browser's built-in WebCrypto (crypto.subtle.digest); MD5 via SparkMD5, because WebCrypto deliberately refuses to implement MD5
Output formatLower-case hexadecimal, the form sha256sum, certutil and Get-FileHash print
Batch modeMany files at once, each with its own progress bar and its own five digests
Verify modePaste a checksum and it is matched, case-insensitively, against every algorithm of every loaded file
File sizeLimited by tab memory, not by a quota — the whole file is read into an ArrayBuffer, so multi-GB files will struggle on a low-memory device
DeterminismThe same bytes always give the same digest, on any machine — that is what makes it useful for integrity checks
Security noteMD5 and SHA-1 are broken for collision resistance. Fine for detecting accidental corruption, not for signatures or passwords

What happens to your file

The file never leaves your device. The page reads it with the FileReader API into an ArrayBuffer in this tab's memory, hands that buffer to crypto.subtle.digest — an operation the browser performs locally, with no network access — and prints the hex. Nothing is uploaded, nothing is cached, and closing the tab discards the buffer. You can disconnect from the network and every mode on this page still works.

About this tool

  1. 1

    Pick text or a file

    The default mode takes typed text or one dropped file.

  2. 2

    Read all five digests

    MD5, SHA-1, SHA-256, SHA-384 and SHA-512 appear together, each with a one-click copy.

  3. 3

    Switch to Many files & verify for a batch

    Drop several files at once; each gets its own row and its own five hashes.

  4. 4

    Paste a published checksum

    In that mode, paste the hash from the download page. It reports which file and which algorithm matched, or that none did.

Specs & compatibility
ModesText or file · Many files & verify
Hashing engineWebCrypto SubtleCrypto for SHA-1/256/384/512, SparkMD5 for MD5
Browser supportAny browser with WebCrypto — Chrome, Edge, Firefox and Safari all qualify. Requires a secure context (HTTPS), which this site is
Input typesUTF-8 text, or any file type at all — the bytes are hashed as-is
NetworkNone. Works offline after the page has loaded
  • Compare hashes by pasting the published one into the verify box rather than by eye — two SHA-256 digests differ in one character more often than you would guess.
  • A hash mismatch after a download usually means a truncated or resumed transfer, not tampering. Re-download before assuming the worst.
  • Hashing text adds no salt, so a hashed password here is not a stored password — never use this output as a credential.
  • Line endings change the bytes: the same text file hashes differently on Windows (CRLF) and Unix (LF).
  • For a very large ISO, expect the browser to hold the whole file in memory — close other tabs first.
  • MD5, SHA-1, SHA-256, SHA-384 and SHA-512 at once
  • Text input or drag-and-drop file input
  • Batch mode for many files with per-file progress
  • Checksum verification against a pasted hash
  • Copy any digest, or all of a file's digests together
  • Runs entirely in the browser, offline-capable
  • Check a downloaded ISO or installer against the SHA-256 the project published.
  • Hash a folder of files to spot which one changed since last week.
  • Produce a checksum to publish next to a file you are distributing.
  • Confirm two files with different names are byte-identical.
  • Generate a test digest while debugging a hashing implementation.
No. The browser reads the file locally and the hash is computed by WebCrypto inside this tab. There is no upload endpoint involved — turn off your network and the page still works.
WebCrypto deliberately omits MD5 because it is cryptographically broken. MD5 is still the checksum many download pages publish, so this page uses the SparkMD5 library for that one algorithm and the browser's own implementation for the SHA family.
SHA-256 for anything that matters. MD5 and SHA-1 only when you are matching a checksum someone else published in that format — both are broken against a deliberate attacker, though still fine for catching a corrupted download.
Yes. Switch to "Many files & verify", drop them all in, and each file gets its own row with all five digests. That mode also takes a pasted checksum and tells you which file it matches.
There is no imposed limit; the ceiling is your browser tab's memory, because the whole file is read into an ArrayBuffer. Files of a few hundred megabytes are routine; multi-gigabyte images may fail on a low-memory machine.
Please do not. A bare hash with no salt and no key-stretching is not password storage — use bcrypt, scrypt or Argon2 on a server for that. This tool is for file and text integrity.
It is the "Many files & verify" mode here. It was the same tool with a file input, so keeping it as a separate URL only split the search signal in two.
View all

Updated

We use anonymous analytics to improve ToolChamp. No personal data is stored or sold. Privacy Policy