How to use the hash generator
- Type or paste text, or choose a file. Every hash appears at once.
- Checking a download? Paste the checksum from the download page into "Check against a checksum". A tick means the file is exactly the one the publisher made.
- Press "Copy" next to the hash you need.
What is a hash?
A hash function turns any amount of data into a short, fixed-length fingerprint. The same input always gives the same hash, and changing a single character gives a completely different one, so hashes are used to check files haven't been damaged or changed.
SHA hashes come from your browser's built-in cryptography (crypto.subtle). Browsers don't include MD5, so we calculate it ourselves following its standard (RFC 1321), and we test it against a well-known implementation.
Frequently asked questions
Which hash should I use?
Use SHA-256 (or SHA-384 / SHA-512) for anything new. MD5 and SHA-1 are broken for security: people can make two different files with the same hash. They're still fine for spotting accidental damage, and many older download pages still list them.
Can I hash passwords with this?
Not for storing them. A plain hash of a password can be cracked quickly by guessing. Password storage needs a slow, salted method such as bcrypt, scrypt or Argon2, done by your server's software.
Can a hash be turned back into the text?
No. A hash is one-way. People can only guess inputs and compare hashes, which is why short or common inputs are easy to find.