Skip to content

Cryptographic hashes, explained

A short guide to what hashes are, what SHA-256 and the SHA family are good for, and how to verify a file with the generator.

Open the Hash Generator →

What this tool does

The Hash Generator produces SHA-1, SHA-256, SHA-384 and SHA-512 hashes of whatever you type, live, and can also hash a file so you can check its integrity. It uses the browser's built-in Web Crypto API, so your text and files never leave your device.

What is a hash?

A cryptographic hash turns any input — a word, a paragraph, a whole file — into a fixed-length string of hex characters. Three properties make it useful: the same input always gives the same hash; even a one-character change produces a completely different hash; and you can't work backwards from the hash to the original input.

The SHA family

  • SHA-256 — the modern default: a 64-character fingerprint used for checksums, signatures and blockchains.
  • SHA-384 / SHA-512 — longer digests for extra margin.
  • SHA-1 — older and now considered weak for security; still seen in legacy systems and Git object IDs.

MD5 isn't offered here: browsers' Web Crypto doesn't implement it, and it's been broken for security use for years. Prefer SHA-256 for anything that matters.

Verifying a file (checksum)

  1. Download the file and note the checksum the publisher lists (often a SHA-256).
  2. Open the Hash Generator and choose "Hash a file instead".
  3. Pick your downloaded file and compare the SHA-256 to the published one.
  4. If they match exactly, the file is intact; if not, re-download it.

How to use it

  1. Type or paste text to see all four hashes update instantly.
  2. Or choose a file to hash its exact bytes.
  3. Click Copy next to whichever hash you need.

Your data stays private

Everything is computed locally with Web Crypto — nothing you hash is ever uploaded.

FAQ

What is a SHA-256 hash?

A fixed 256-bit fingerprint of any input; the same input always hashes the same, and it can't be reversed.

How do I verify a file's checksum?

Hash the file and compare it to the publisher's checksum — a match means it's intact.

Is my data uploaded?

No — it all runs in your browser.

Ready to try it? Open the Hash Generator →

Related guides