SHA Hash
Hash text or files, and compare
Input
Hash
The hash appears as you type.
Result
Looks like:
MD5 and SHA-1 have known collisions, so they are not offered for integrity checks.
Text and files are read in your browser only. Nothing is uploaded or stored.
How to use
Produces SHA-256, SHA-384 and SHA-512 hashes of text or a file, and compares one against a hash you were given. This value is the checksum used to confirm a download arrived intact. Files are read inside your browser and never uploaded.
When to use it
- Verifying that an installer was not tampered with.
- Confirming two files are byte-for-byte identical, regardless of their names.
- Getting the hash of a string for development or verification.
How to use it
- Choose a mode — text, file or compare.
- Pick an algorithm (SHA-256, 384 or 512).
- Type the text or choose the file and the hash is calculated at once.
- Paste the publisher's hash and yours into compare to check they match.
Good to know
- MD5 and SHA-1 are not offered. Ways to make two different files share a value (collisions) are known, so they are no longer suitable for integrity checks.
- Files are read entirely in your browser, so even large or private files are safe here.
- A hash changes completely when a single character changes, so "nearly the same" means nothing — values match or they do not.
- A hash cannot be reversed into the original content. It is a fingerprint, not encryption.
Frequently asked questions
Why no MD5?
Because it is already possible to construct two different files with the same MD5, and the same goes for SHA-1. Offering them for integrity checking would invite false confidence.
How do I verify a checksum?
Copy the hash published alongside the download, compute the file's hash here, and put both into compare. A match means the file is intact; a mismatch means it was corrupted in transit or is a different file.
Can it handle large files?
Up to 200MB. Anything larger is refused and says so. Bigger files take longer, and progress is shown while it works.
Can I store passwords as SHA hashes?
No. Password storage needs a deliberately slow algorithm such as bcrypt or argon2; the SHA family is fast, which helps an attacker. This tool is for file and text integrity.
SHA-256 or SHA-512?
SHA-256 is enough for almost everything and is the most widely published. If the publisher quoted SHA-512, choose that — comparisons only make sense within the same algorithm.