Skip to content
TinyTools

Hash Generator

Checksums for text and files, and a one-click verify.

SHA-256 unless something tells you otherwise. MD5 and SHA-1 are here for checking against published checksums, not for security.

Everything is processed on your device. Nothing you upload or type is sent to a server, and nothing is stored.

Hash Generator online

A hash is a short fingerprint of some data: the same input always gives the same string, and changing a single byte changes it completely. That makes it the standard way to check that a download arrived intact, that two files really are identical, or that a value has not been tampered with in transit. Paste text or drop in a file — including a large one, since nothing is uploaded — and paste a published checksum next to it to have the comparison done for you.

How to use hash generator

  1. Choose text or a file

    Type or paste a string, or drop in a file of any size.

  2. Pick the algorithms

    SHA-256 is the sensible default. MD5 and SHA-1 are there because software vendors still publish them.

  3. Compare, if you are verifying

    Paste the checksum from the download page into the compare box and it will tell you plainly whether it matches.

  4. Copy the result

    Each hash has its own copy button.

Frequently asked questions

Which algorithm should I use?

SHA-256 unless something tells you otherwise — it is fast, it is what most projects publish, and no practical attack is known against it. Use MD5 or SHA-1 only to check against a checksum that is already published in that form.

Is MD5 broken?

For security, yes. Two different files can be constructed to share an MD5 hash, so it proves nothing against someone who is deliberately tampering. It is still perfectly good at catching a truncated or corrupted download, which is why vendors keep publishing it — and why this tool still offers it.

Can I get the original text back from a hash?

No. Hashing is one-way by design: the output is a fixed length no matter how much went in, so most of the information is gone. Short or common inputs can be found by guessing against a precomputed table, which is why passwords are never stored as a bare hash.

Why does my hash not match the website's?

Usually the download is incomplete or came from a mirror, but check the obvious things first: a trailing newline in pasted text changes the hash completely, and so does hashing the text of a file rather than the file itself. Compare the algorithm too — a SHA-256 will never match a published SHA-1.

Is my file uploaded to check it?

No. SHA hashing uses the crypto engine already built into your browser, and MD5 is calculated here in the page. Your file never leaves your device, which is the point when you are checking something confidential.

You might also like