Hash Generator (SHA-256, SHA-512)

Hash text as you type or hash a file to check a download. Uses your browser's WebCrypto engine.

Verify

How it works

Type into the text box and the four digests update live. Text is hashed as UTF-8, which matches what command-line tools like sha256sum produce for the same text without a trailing newline.

To verify a download, choose the file and paste the checksum published by the vendor into Verify. The tool tells you which algorithm matched, or that none did. The file is read into memory on your device; it is never sent anywhere.

SHA-256 and SHA-512 are the right choices for integrity checks today. SHA-1 is shown for compatibility with older systems, but it is no longer considered collision-resistant.

Questions

Why is there no MD5?

Browsers' WebCrypto API does not offer MD5 because it is broken for security purposes. Use SHA-256 instead.

Can I hash passwords here for storage?

Plain SHA hashes are not suitable for storing passwords. Use a slow password hash such as Argon2 or bcrypt on your server.

Why does my hash differ from the command line?

Usually a trailing newline: echo adds one. Try printf or echo -n to hash exactly the same bytes.

Related tools

Guides