Press Ctrl + D to bookmark Hash Generator.
Open your browser menu (⋮ or the share icon) and tap Bookmark or Add to Home Screen.
Feedback on Hash Generator
Hash Generator
MD5, SHA-1, SHA-256, SHA-512, SHA-3, Keccak-256 and CRC32 for text or files of any size. Paste a checksum to check a download.
Your text ends with a line break, which changes the hash.
✓ Match — . The data is identical.
✗ No match yet — add the file above.
A -bit hash fits . If you used the right algorithm, the data is different.
No algorithm here gives a -bit hash. Check you copied all of it.
That doesn't look like a hash. Paste hex (0–9, a–f) or Base64.
Hashes
Pick at least one algorithm above.
Files
Which one to use
- SHA-256 — the default for checksums, Git, TLS and most downloads.
- SHA-512 / SHA-3 — longer or newer, equally safe choices.
- MD5, SHA-1, CRC32 — only to match old checksums. Collisions can be made on purpose.
- Keccak-256 — Ethereum's hash. It is not the same as SHA3-256.
Check a file from the command line
- Windows (PowerShell)
Get-FileHash file.iso -Algorithm SHA256- macOS
shasum -a 256 file.iso- Linux
sha256sum file.iso
Passwords and signatures
A plain hash is too fast to protect passwords. Store them with the Bcrypt Generator. To prove a message came from someone who knows a secret key, use the HMAC Generator. To encode rather than hash, use Base64.
About the Hash Generator
A hash function turns any input into a fixed-length fingerprint. The same input always gives the same hash, and even a one-letter change gives a completely different one. That makes hashes ideal for checking that a file arrived intact.
How to use it
- 1 Type text, or switch to Files and drop one or more files.
- 2 Pick the algorithms you need, such as SHA-256.
- 3 Paste the published checksum into the compare box to see if it matches, or copy the hash.
Frequently asked questions
Can a hash be reversed?
No. Hashes are one-way. Short or common inputs can be guessed with lookup tables, which is why passwords need slow, salted hashes like bcrypt.
Which hash should I use?
SHA-256 is the standard choice for integrity checks. SHA-512 and SHA-3 are equally safe. MD5 and SHA-1 are broken for security and should only be used to match old checksums.
How do I verify a downloaded file?
Drop the file into the Files tab and paste the checksum from the download page into the compare box. It tells you which algorithm matched, or that the file is different.
Are my files uploaded?
No. Files are read in small pieces inside your browser, so even multi-gigabyte ISO images can be hashed without leaving your device.
Why does my hash differ from the command line?
Usually because of a line break. Commands like echo add a newline to the end of the text, which changes the hash. The tool warns you when your text ends with one. Also check that both sides use the same algorithm.
Is SHA3-256 the same as Keccak-256?
No. Ethereum uses the original Keccak, which pads its input differently from the final SHA-3 standard, so the two give different hashes for the same input.
What is CRC32 for?
CRC32 is a fast checksum used in ZIP files, PNG images and network packets to catch accidental damage. It is easy to forge, so never use it for security.