MD5 · SHA-1 · SHA-256 · SHA-512
Hash generator and checksum checker
A hash function turns input of any size into a fixed-length fingerprint: SHA-256 always gives 256 bits, written as 64 hex digits. Type text or choose a file to get five hashes at once, then compare one with a published checksum.
- SHA-256("abc") = ba7816bf8f01cfea414140de5dae2223b00361a396177a9cb410ff61f20015ad
- SHA-1("abc") = a9993e364706816aba3e25717850c26c9cd0d89d
- MD5("abc") = 900150983cd24fb0d6963f7d28e17f72
Text and files are hashed in this tab and nothing is uploaded. A hash is not encryption, and MD5 and SHA-1 are not suitable for protecting passwords or signatures.
Scanned by 
NortonTM Safe Web
At a glance
- Price
- No charge
- Account
- None needed
- Algorithms
- MD5, SHA-1, SHA-256, SHA-384 and SHA-512
- Standards
- FIPS 180-4 (SHA family), RFC 1321 (MD5)
- Input
- Text up to 10 MB, or a file read in chunks
- Upload
- None — text and files stay in your browser tab
Hash sizes and test vectors
The digests below are produced by the hashes on this page, written as lower-case hex.
| Algorithm | Bits | Bytes | Hex digits |
|---|---|---|---|
| MD5 | 128 | 16 | 32 |
| SHA-1 | 160 | 20 | 40 |
| SHA-256 | 256 | 32 | 64 |
| SHA-384 | 384 | 48 | 96 |
| SHA-512 | 512 | 64 | 128 |
| Algorithm | Digest |
|---|---|
| MD5 | 900150983cd24fb0d6963f7d28e17f72 |
| SHA-1 | a9993e364706816aba3e25717850c26c9cd0d89d |
| SHA-256 | ba7816bf8f01cfea414140de5dae2223b00361a396177a9cb410ff61f20015ad |
| SHA-384 | cb00753f45a35e8bb5a03d699ac65007272c32ab0eded1631a8b605a43ff5bed8086072ba1e7cc2358baeca134c825a7 |
| SHA-512 | ddaf35a193617abacc417349ae20413112e6fa4e89a97ea20a9eeee64b55d39a2192992a274fc1a836ba3c23a3feebbd454d4423643ce80e2a9ac94fa54ca49f |
| Algorithm | Digest |
|---|---|
| MD5 | d41d8cd98f00b204e9800998ecf8427e |
| SHA-1 | da39a3ee5e6b4b0d3255bfef95601890afd80709 |
| SHA-256 | e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 |
| SHA-384 | 38b060a751ac96384cd9327eb1b1e36a21fdb71114be07434c0cc7bf63f6e1da274edebfe76f65fbd51ad2f14898b95b |
| SHA-512 | cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e |
How to hash text or check a file
Choose text or file
In Text mode, type or paste the text. In File mode, choose or drop a file. The file is read in chunks, with a progress bar for large files.
Read the hashes
MD5, SHA-1, SHA-256, SHA-384 and SHA-512 appear together. Show them as lower-case hex, upper-case hex or Base64, and copy any one.
Compare a checksum
Paste the checksum published by the source into the compare box. The page reads the algorithm from its length and says Match or No match. Case, spaces and colons are ignored.
How the hashes are computed
MD5, SHA-1, SHA-256, SHA-384 and SHA-512 run in this page as incremental hashes. A file is read in chunks, each chunk updates the hash state, and memory use stays flat however large the file is. All five were checked against the published test vectors: the empty input, the text abc and one million a characters. A hex digest has 2 digits per byte: 32 for MD5, 40 for SHA-1, 64 for SHA-256, 96 for SHA-384 and 128 for SHA-512.
A hash is not encryption: it cannot be turned back into the input and it has no key. MD5 and SHA-1 are broken for security, because collisions can be produced for both (RFC 6151 for MD5; the SHAttered attack in 2017 for SHA-1). They still catch accidental damage when you check a download against a published checksum. Do not use them for signatures or certificates. Do not store passwords with a plain hash either, because hashes are fast by design; use a slow, salted password hash such as Argon2, scrypt, bcrypt or PBKDF2.
Hash and checksum questions
How do I check a file's SHA-256 checksum?
Switch to File, choose the file and paste the published checksum into the compare box. The page recognises the algorithm from the length, so 64 hex digits is SHA-256, and says Match or No match. Case, spaces and colons are ignored.
What is the SHA-256 hash of an empty string?
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855. The SHA-256 of the text abc is ba7816bf8f01cfea414140de5dae2223b00361a396177a9cb410ff61f20015ad. The tables below list all five algorithms for both inputs.
Are MD5 and SHA-1 still safe to use?
To check a download against a published checksum, they still catch accidental damage. For signatures, certificates or passwords they are not suitable, because collisions can be produced for both. Use SHA-256 or SHA-512 where security matters.
Is a hash the same as encryption?
No. Encryption can be undone with a key. A hash cannot be undone and has no key. The same input always gives the same hash, and a different input gives an unrelated-looking one. A hash shows that content is unchanged; it does not hide the content.
Why does another tool show a different hash for the same text?
Usually the bytes differ. Text is hashed here as UTF-8, and a trailing newline, a CRLF line ending instead of LF, or another character encoding changes the hash. To avoid this, hash the file itself.
Is my file uploaded to be hashed?
No. The file is read and hashed in your browser tab. Large files take time because the hashing runs in JavaScript. For a file above 256 MB, SHA-384 and SHA-512 start switched off because they are the slowest; tick them to include them.