Hash & Checksum Generator
MD5, SHA-1 and SHA-2 for text or a file, checked against a published checksum.
Paste the checksum from the download page. Every algorithm below is compared, so you do not need to know which one it used.
Checksums only. Broken for security since 2004.
Checksums and old git objects. Broken for security since 2017.
The default choice for anything that matters.
SHA-2 family, longer digest.
SHA-2 family, longest digest.
About this tool
Generate MD5, SHA-1, SHA-256, SHA-384 and SHA-512 digests of text or of a file. Paste the checksum from a download page and every algorithm is compared, so you do not need to know which one it used. SHA digests come from the browser's Web Crypto engine; MD5 is included because it is still what most download pages print, with a clear note that it is fit for integrity checks and not for security. Files are read in your browser and never uploaded.
The usual reason to be here is a download page listing a checksum. Drop the file in, paste that checksum into the check box, and the page compares it against every algorithm so you do not need to know which one was used.
MD5 and SHA-1 are marked integrity only for a reason. Both are broken in the sense that someone can deliberately construct two different files with the same digest, so neither should guard anything security-critical. Detecting an interrupted download or a corrupted copy is still a job they do fine.
SHA-256 through SHA-512 come from the browser’s own Web Crypto engine. Files are read into the tab and hashed there; nothing is uploaded, which is also why very large files are better checked with sha256sum on your own machine.