Skip to content

File Hash Checker

Compute MD5, SHA-1, SHA-256, SHA-384 and SHA-512 hashes of files or text entirely in your browser with no upload.

Updated

What is the File Hash Checker?

A file hash (also called a checksum or digest) is a short, fixed-length fingerprint of a file’s exact bytes. Change a single bit and the hash changes completely. That property makes hashes the standard way to verify that a download is intact, a backup is identical to the original, or forensic evidence has not been altered.

This tool computes MD5, SHA-1, SHA-256, SHA-384 and SHA-512 hashes for any number of files or for plain text. Everything runs locally in your browser with the Web Crypto API (plus a pure-JavaScript MD5 implementation). Nothing is ever uploaded, so sensitive installers, disk images or confidential documents never leave your device.

Drop files, optionally paste an expected hash, and instantly see match / mismatch results together with file size, type and computation time. You can also export a plain-text or JSON report for records or ticket systems.

How it works

  1. Choose input mode
    Switch between Files (drag-and-drop or browse, multi-file supported) and Text (paste or type any string).

  2. Select algorithms
    Tick the hashes you need. Common presets (MD5 + SHA-1 + SHA-256) or all five are one click away. SHA-256 is the current industry standard for integrity checks; MD5 and SHA-1 remain useful for legacy comparison.

  3. Optional expected hash
    Paste a known checksum (from a vendor website, checksum file, etc.). The tool normalises case and whitespace, then marks every matching algorithm with a clear ✓ Match or ✗ Mismatch badge.

  4. Compute
    Click Compute hashes. Each file is read fully into memory and hashed with the selected algorithms. Progress is shown for multi-file batches. Timing is reported so you can gauge performance on large files.

  5. Inspect & export
    Results appear as cards showing filename, size, type, duration and every digest with its own copy button. Copy the full report or download it as .txt / .json for documentation.

All processing is client-side. SHA family digests use the browser’s native crypto.subtle.digest; MD5 uses a compact, test-vector-verified pure-JavaScript implementation. No network requests are made after the page loads.

Examples

Empty file MD5 and SHA-256

Hash of a zero-byte file using the two most common algorithms.

Empty file (0 bytes)
MD5: d41d8cd98f00b204e9800998ecf8427e
SHA-256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Text string SHA-256

SHA-256 digest of the classic test string “abc”.

abc
ba7816bf8f01cfea414140de5dae2223b00361a396177a9cb410ff61f20015ad

Verify a downloaded installer

Compare the published SHA-256 of a software release against the local file.

installer.exe + expected hash a1b2c3…
Match or Mismatch badge for each selected algorithm

Frequently asked questions

Are my files uploaded to a server?

No. Every byte is processed entirely inside your browser. The tool never sends file contents, hashes, or any other data over the network.

Which hash algorithms are supported?

MD5, SHA-1, SHA-256, SHA-384 and SHA-512. SHA-256 is recommended for new integrity checks; MD5 and SHA-1 are retained for compatibility with older published checksums.

Is MD5 or SHA-1 still safe to use?

Both are cryptographically broken for collision resistance and should not be used for digital signatures or password storage. They remain perfectly usable for non-security integrity checks (detecting accidental corruption or comparing against legacy published hashes).

How large a file can I hash?

The practical limit is your browser’s available memory (typically several hundred MB to a few GB). Very large files may cause the tab to become sluggish; for multi-gigabyte ISOs prefer a native tool such as sha256sum or PowerShell’s Get-FileHash.

What does a “Match” or “Mismatch” mean?

If you paste an expected hash, the tool compares it (case-insensitive, whitespace-ignored) against each computed digest of the matching length. A Match confirms the file is byte-identical to the source that published the hash; a Mismatch indicates corruption, a wrong file, or an incorrect algorithm.

Can I hash multiple files at once?

Yes. Drop or select any number of files; each is hashed independently and shown in its own result card. Aggregate size and total time are also displayed.

Does the tool work offline?

Once the page has loaded, yes. All hashing logic is self-contained JavaScript and Web Crypto; no further network access is required.

How do I verify a software download?

Download the file from the official site, note the published SHA-256 (or other) checksum, drop the file into this tool, paste the expected hash, and click Compute. A Match confirms the download is authentic and uncorrupted.

Related tools

More utilities you might find handy.

Security

API Key Generator

Generate cryptographically secure API keys, tokens, and secrets in your browser. Hex, Base62, Base64URL, UUID, custom charset, prefixes, and bulk export.
Security

Bcrypt Hash Generator

Generate and inspect bcrypt password hashes locally in your browser.
Security

CRC32 Generator

Instantly generate CRC32, CRC32C, BZIP2, MPEG-2 and other checksums for text, files, hex or Base64 – 100% client-side.