Hash Generator
Compute a digest of some text, or paste a published checksum alongside it and get a straight answer on whether they match. Every algorithm here is checked against the platform’s own crypto library in this project’s tests.
Output appears here as you type.
Runs entirely in your browser. Nothing you paste here is uploaded or stored.
Questions
Is what I paste sent anywhere?
No. The digest is computed in your browser, and the page cannot open a network connection — its Content-Security-Policy sets connect-src to ‘none’. That is the point for this tool in particular: people hash secrets, tokens and payloads to compare them, and every online hash generator that computes server-side receives the plaintext first.
Can I hash a binary file, like a downloaded release?
Not yet, and it is better to say so than to quietly return the wrong answer. Files here are read as UTF-8 text, and any byte sequence that is not valid UTF-8 is replaced during decoding — so a digest of a zip or an installer would be computed over corrupted input and would never match the published checksum. Use shasum or certutil locally for binaries until this handles bytes properly.
Why offer MD5 and SHA-1 at all?
Because they are still what a great many projects publish beside their downloads, and Git object ids are SHA-1. Both are broken for anything adversarial — MD5 collisions are trivial and SHA-1 collisions have been demonstrated — so use them to verify against an existing published value, never to sign or store anything.
Is CRC-32 a hash?
No, and it sits here only because it appears beside hashes everywhere. It is a checksum for catching accidental corruption in zip and png files. It is trivial to forge deliberately, so it tells you a file was not damaged in transit and nothing more.