Hash & Checksum Generator
Generate SHA-1/256/384/512 hashes of text or files, in your browser.
- 👨💻 Developer Tool
- ✓ Free
- ✓ No sign-up
- ✓ Private — runs in your browser
- ✓ Any device
Hashed locally — your file never leaves your device
% read…
SHA hashes use your browser's native Web Crypto API; MD5 and CRC32 run in pure JavaScript — 100% offline, nothing is uploaded. Note: MD5 and SHA-1 are fine for checksums but cryptographically broken; prefer SHA-256+ for security.
Why you’ll love Hash & Checksum Generator
How to use it
- 01
Open it
No download and no login — the tool is ready right at the top of this page.
- 02
Use it
Enter your details or start interacting. Everything updates live as you go.
- 03
Get your result
Copy, download or share your result in a single tap. That’s it.
About Hash & Checksum Generator
This tool computes six digests side by side — MD5, SHA-1, SHA-256, SHA-384, SHA-512 and CRC32 — for any text you type or any file you drop in. Output can be lowercase hex, UPPERCASE hex or Base64, and you can switch off the algorithms you do not need. In text mode, results update live as you type (with a byte count, since hashing works on UTF-8 bytes, not characters).
Everything happens locally. The SHA family is computed with your browser's native Web Crypto API, which is fast enough to hash large files in moments. Web Crypto deliberately omits MD5 and CRC32, so those run as pure-JavaScript implementations bundled with the page. Files are read with the FileReader API directly into memory — nothing is uploaded, and a progress bar tracks the local read. Files over 1 GB trigger a warning because holding them in memory can strain a browser tab.
The verify box is the practical half of the tool: paste the checksum a download page publishes and it is compared against every computed digest, automatically detecting which algorithm it matches. A green match means your copy of the ISO, installer or firmware image is byte-for-byte identical to what the publisher hashed; a mismatch means the download is corrupted or has been tampered with.
One caveat the tool itself flags: MD5 and SHA-1 are cryptographically broken — researchers can manufacture two different inputs with the same hash — so they should never protect anything security-sensitive. They remain perfectly fine for detecting accidental corruption, but for signatures, integrity guarantees or anything adversarial, use SHA-256 or stronger.
Popular uses
- ✦ Verify a downloaded ISO or installer against the publisher's SHA-256 checksum
- ✦ Generate MD5/SHA sums to publish alongside your own release files
- ✦ Confirm two copies of a file are byte-identical by comparing digests
- ✦ Produce Base64 SHA-384 digests for subresource integrity (SRI) attributes
- ✦ Spot-check that a config or firmware file has not been modified
Frequently asked questions
Are my files uploaded when I hash them?
Which hash should I use to verify a download?
If MD5 is "cryptographically broken", why is it still offered?
What is CRC32 and how is it different from SHA-256?
Why do hex and Base64 outputs look so different for the same hash?
Is Hash & Checksum Generator free to use?
Is my code or data sent anywhere?
More developer tools
All developer toolsPeople also use
We built this. We can build yours.
Hash & Checksum Generator is one of our free tools. Need a website, app, AI agent or automation? Fixed price — and you own the code.