Hashes of text or files
Type or paste text and every hash updates as you type, or choose a file to compute its checksums. Text is encoded as UTF-8 before hashing, the same as most command-line tools. Files are read by your browser and never leave your device, so this works for large or private files too.
SHA-256 is the usual choice for verifying downloads: compare the hash shown here with the one the software vendor publishes. If even one byte differs, the hash is completely different.
Which algorithm?
- SHA-256 and SHA-512 for checksums, integrity checks and digital signatures.
- SHA-1 and MD5 only to match old checksums. Both are broken for security purposes, since attackers can create collisions.
- Not for passwords. Store passwords with Argon2, bcrypt or scrypt. These fast hashes can be cracked at billions of guesses per second.
Frequently asked questions
Why does my hash differ from the command line?
The most common cause is a trailing newline. echo adds one, so use printf ‘%s’ ‘text’ | sha256sum to match this page.
Can a hash be reversed?
No. Hashes are one-way. However, hashes of short or common inputs can be looked up or guessed, which is why passwords need slow, salted password hashes.