A hash function turns any text or file into a short, fixed-length fingerprint. The same input always gives the same hash, and changing a single byte changes it completely, which makes hashes useful for checking downloads, spotting duplicates, and building cache keys. This tool computes MD5, SHA-1, SHA-256, SHA-384, and SHA-512 at once.
Which algorithm to use
SHA-256. The safe default for checksums, signatures, and anything security-related.
SHA-512 and SHA-384. Longer hashes from the same SHA-2 family, often faster than SHA-256 on 64-bit machines.
SHA-1. Broken for security since 2017, but still used for Git commit IDs and older checksums.
MD5. Broken for security since 2004. Fine for spotting accidental corruption or duplicate files, never for passwords or signatures.
Checking a download
Click Hash a file and choose the file, then paste the checksum published by the site you downloaded it from into Check against a hash. A match means your copy is identical to the original, byte for byte.
Hashing is not encryption
A hash can't be turned back into the original text, and there is no key. To store passwords, use a slow password hash such as bcrypt, scrypt, or Argon2, never plain MD5 or SHA, which are fast enough to guess billions of candidates per second.
From the command line
# macOS
shasum -a 256 file.zip
md5 file.zip
# Linux
sha256sum file.zip
# Windows
certutil -hashfile file.zip SHA256
Frequently asked questions
What is a hash generator?
A tool that computes the hash, or checksum, of text or a file. This one gives MD5, SHA-1, SHA-256, SHA-384, and SHA-512 in one go.
Can a hash be reversed?
No. Hash functions are one-way. Short or common inputs can sometimes be guessed by trying candidates, which is why passwords need a slow hash like bcrypt.
Are my files uploaded?
No. Files are read and hashed in your browser, so they never leave your device, whatever their size.
Why does my hash differ from another tool's?
Usually the input differs: a trailing space or line break, or a different text encoding. This tool hashes text as UTF-8 exactly as typed.