Verify downloads
Compare a file's SHA-256 with the checksum on the publisher's site.
Hash Generator: MD5, SHA-256 & More
Calculate hashes for text or any file and verify downloads against a published checksum. Add a secret key to create HMAC signatures for API testing.
- 100% free
- No sign-up
- Runs in your browser
Drop a file here or click to chooseGet checksums to verify downloads
How to use
How to use the Hash Generator (MD5, SHA-256)
- Choose Text or File.
- Type your text or drop a file.
- Optionally add a secret key to get HMAC values.
- Paste an expected checksum to verify it, or copy any hash.
Private by design. Your code and data are processed in your browser. Nothing is uploaded, logged or stored, so it is safe for API responses, configs and other internal data.
About this tool
Which hash algorithm should you use?
A hash function turns any input into a fixed-length fingerprint. The same input always gives the same hash, and the smallest change produces a completely different one. That makes hashes ideal for checking that a download has not been corrupted or altered.
SHA-256 is the modern default for integrity checks and signatures. MD5 and SHA-1 are still common for checksums but are no longer considered secure against deliberate tampering. None of these should be used on their own to store passwords; use a dedicated password hashing method such as bcrypt or Argon2 on your server.
Good to know
Hashing tips
Avoid MD5 for security
Use SHA-256 or stronger wherever security matters.
Test API signatures
Use HMAC-SHA256 with your key to check webhook signatures.
Watch whitespace
A trailing space or newline changes the hash completely.
FAQ
Hash Generator (MD5, SHA-256) FAQs
Can a hash be reversed?
No. Hash functions are one-way, though weak passwords can be guessed by trying many inputs.
Is MD5 still safe?
It is fine for spotting accidental corruption, but not for security, because collisions can be created deliberately.
Are my files uploaded?
No. Files are hashed in your browser, even large ones.
What is HMAC?
A hash combined with a secret key, used to prove a message came from someone who knows the key.
Need extra development capacity?
Hire dedicated developers from iCreativez who work as part of your team.