File Hash Generator
Calculate MD5, SHA-1, SHA-256, SHA-384 and SHA-512 checksums for one file or a whole batch, and verify a published hash.
Drag & drop files here, or click to browse
No uploads. Every file is read and hashed on your device.
No files yet — drop one or more files above.
How it works
Drop one file or a whole batch and every checksum is computed straight from the bytes on your
disk — MD5, SHA-1, SHA-256, SHA-384 and SHA-512, whichever boxes you tick. The SHA family uses
the browser's built-in Web Crypto API (crypto.subtle.digest); MD5 is not part of
Web Crypto, so it comes from a small RFC 1321 implementation bundled with this page. The
results are byte-for-byte identical to sha256sum on Linux,
shasum -a 256 on macOS and certutil -hashfile on Windows.
Paste the checksum published next to a download into Verify a published checksum and
the tool tells you which file and which algorithm it matches — case, spaces and colons are
ignored. Hash several files at once and any two with the same digest are flagged as identical,
which is a quick way to spot duplicate downloads or a truncated copy.
Download checksums.txt writes a standard hash filename
list you can ship with your release or check later with sha256sum -c. Nothing ever
leaves your browser, so large ISOs, archives and private documents are safe here. Note that MD5
and SHA-1 are broken for security purposes — use them for integrity checks only and prefer
SHA-256 for anything that matters.
Frequently asked questions
How do I check the checksum of a downloaded file?
Drop the downloaded file onto this page and its MD5, SHA-1 and SHA-256 digests appear straight away. Copy the checksum published on the download page, paste it into the "Verify a published checksum" box, and the tool tells you which algorithm and which file it matches — case, spaces and colons are ignored, so you can paste it exactly as the site prints it. A match means the file arrived intact and untampered; no match means you should download it again. The digests are identical to what sha256sum on Linux, shasum -a 256 on macOS or certutil -hashfile on Windows would print.
Is it safe to hash a file online?
With this tool, yes: your file is never uploaded. It is read from disk with the browser's File API and hashed inside the page — the SHA family by the built-in Web Crypto API, MD5 by a small RFC 1321 implementation bundled with the page — so no network request is made and there is no server that could keep a copy. That makes it safe for private documents, keys, archives and disc images. Many other online checksum sites do POST your file to a backend, so check before using them for anything confidential.
Can I hash several files at once?
Yes. Select or drag as many files as you like and each one gets its own card with every digest you have ticked. Any two files with the same content are flagged as identical, which is a fast way to find duplicate downloads or a truncated copy. Press "Download checksums.txt" to save a standard hash-then-filename list, grouped per algorithm, that you can ship alongside a release or later re-check with sha256sum -c.