Skip to content

File Hash Checker

Compute MD5, SHA-1, SHA-256, SHA-384 and SHA-512 hashes of files or text entirely in your browser with no upload.

Updated

What is the File Hash Checker?

A file hash (also called a checksum or digest) is a fixed-length value calculated from a file's bytes. Hashes can help compare files or check for accidental changes. By themselves, they do not prove who created a file or that a published checksum is trustworthy.

This tool computes MD5, SHA-1, SHA-256, SHA-384, and SHA-512 hashes for files or text in your browser. MD5 and SHA-1 are included for compatibility; use SHA-256 or stronger for new integrity checks.

Select files or text, optionally enter an expected hash, and compare the results. To check a download's source, obtain its checksum through a trusted, independent channel; a match only shows that the file has the same bytes as the value you entered.

How it works

  1. Choose input mode
    Switch between Files (drag-and-drop or browse, multi-file supported) and Text (paste or type any string).

  2. Select algorithms
    Tick the hashes you need. Common presets (MD5 + SHA-1 + SHA-256) or all five are one click away. SHA-256 is the current industry standard for integrity checks; MD5 and SHA-1 remain useful for legacy comparison.

  3. Optional expected hash
    Paste a checksum and the tool compares it with the selected digest, ignoring case and whitespace. A match means the bytes produce the same digest; it does not establish that the checksum came from a trusted source.

  4. Compute
    Click Compute hashes. Each file is read fully into memory and hashed with the selected algorithms. Progress is shown for multi-file batches. Timing is reported so you can gauge performance on large files.

  5. Inspect & export
    Results appear as cards showing filename, size, type, duration and every digest with its own copy button. Copy the full report or download it as .txt / .json for documentation.

Hashing is performed in your browser. SHA-family digests use the browser's crypto.subtle.digest; MD5 uses a JavaScript implementation. Files are read into memory, so very large files may use substantial memory.

Examples

Empty file MD5 and SHA-256

Hash of a zero-byte file using the two most common algorithms.

Empty file (0 bytes)
 
MD5: d41d8cd98f00b204e9800998ecf8427e
SHA-256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Text string SHA-256

SHA-256 digest of the classic test string “abc”.

abc
 
ba7816bf8f01cfea414140de5dae2223b00361a396177a9cb410ff61f20015ad

Verify a downloaded installer

Compare the published SHA-256 of a software release against the local file.

installer.exe + expected hash a1b2c3…
 
Match or Mismatch badge for each selected algorithm

Frequently asked questions

Are my files uploaded to a server?

File hashing is performed in your browser. Avoid using a shared or untrusted device for sensitive files, and remember that browser extensions or other software on the device are outside this tool's control.

Which hash algorithms are supported?

MD5, SHA-1, SHA-256, SHA-384 and SHA-512. SHA-256 is recommended for new integrity checks; MD5 and SHA-1 are retained for compatibility with older published checksums.

Is MD5 or SHA-1 still safe to use?

Both have known collision weaknesses and should not be used for security-sensitive integrity checks, digital signatures, or password storage. They may still be needed to compare against legacy checksums.

How large a file can I hash?

The practical limit is your browser’s available memory (typically several hundred MB to a few GB). Very large files may cause the tab to become sluggish; for multi-gigabyte ISOs prefer a native tool such as sha256sum or PowerShell’s Get-FileHash.

What does a “Match” or “Mismatch” mean?

If you paste an expected hash, the tool compares it (case-insensitive, whitespace-ignored) against each computed digest of the matching length. A Match means the file produced the same digest as the value entered. It does not prove the file came from a particular source; that depends on obtaining the expected hash through a trusted channel. A mismatch can indicate different bytes, a wrong algorithm, or an incorrect expected value.

Can I hash multiple files at once?

Yes. Drop or select any number of files; each is hashed independently and shown in its own result card. Aggregate size and total time are also displayed.

Does the tool work offline?

Once the page has loaded, yes. All hashing logic is self-contained JavaScript and Web Crypto; no further network access is required.

How do I verify a software download?

Download the file from the official site and compare its SHA-256 digest with a checksum obtained through a trusted channel. A match confirms the digest agrees, but a checksum alone does not prove authenticity if the checksum itself could have been replaced.

Related tools

More utilities you might find handy.

Security

API Key Generator

Generate random strings for application secrets or testing, with selectable formats, prefixes, and bulk export.
Security

Bcrypt Format Demo

Inspect bcrypt-like string structure and demonstrate a non-interoperable password-hash format.
Security

CRC32 Generator

Instantly generate CRC32, CRC32C, BZIP2, MPEG-2 and other checksums for text, files, hex or Base64 – 100% client-side.