↑↓ to move · Enter to open · Esc to close

File Hash Generator

A file checksum calculator that runs in your browser: drop files up to 50 MB, get their MD5, SHA-1, SHA-256, SHA-512, SHA3-256, or CRC32 values, and check them against a published checksum or a whole SHA256SUMS list.

Your files are processed in your browser and never uploaded.
Built and reviewed by · Updated

1Files

Choose files or drop them here. Any file type. Up to 50 MB each, 20 at a time.

    No file handy?

    2Algorithms

    MD5 and SHA-1 are fine for spotting a corrupted download, not for security checks.

    3Verify optional

    Compared with every file and every ticked algorithm. Letter case and spaces are ignored.

    Results

    Your checksums will appear here

    1. 1Add one or more files
    2. 2Pick the algorithms you need
    3. 3Paste a checksum to verify it, if you have one

    How to use the File Hash Generator

    1. Drop one or more files on the box, or press it to choose them. Each file can be up to 50 MB, and up to 20 files can be hashed together.
    2. Tick the algorithms you need. SHA-256 is ticked to start with.
    3. To check a download, paste the checksum from its page into Expected checksum. The row that matches gets a Match badge.
    4. To check several files at once, open Verify a checksum list and paste the contents of a SHA256SUMS or .sha256 file.
    5. Press Download checksums to save the results as a checksum file.

    How it works

    The page hands each file to a Web Worker, which reads it in 4 MB pieces and feeds every piece to the ticked hash functions at the same time. The page stays responsive while that runs, and a progress bar shows how far the current file has got. The hashing code is the hash-wasm library, compiled to WebAssembly and served from this site.

    A checksum list is read line by line. The sha256sum form is the hash, two spaces (or a space and an asterisk), and the file name. The BSD form is SHA256 (name) = hash. Files are paired with lines by name, and a path in the list such as dist/app.zip still matches a chosen file called app.zip.

    The algorithm of a bare hash is worked out from its length: 8 hex characters for CRC32, 32 for MD5, 40 for SHA-1, 64 for SHA-256 or SHA3-256, 96 for SHA-384, and 128 for SHA-512.

    Examples

    Try the sample loads a text file holding the sentence The quick brown fox jumps over the lazy dog with no line break. Its checksums are widely published, so you can compare them with any other tool:

    AlgorithmChecksum
    MD59e107d9d372bb6826bd81d3542a419d6
    SHA-256d7a8fbb307d7809469ca9abcb0082e4f8d5651e46d3cdb762d02d0bf37c9e592
    CRC32414fa339

    With SHA-256 alone ticked, the downloaded file is named SHA256SUMS and holds lines such as d7a8fbb3...e592 sample.txt, the format sha256sum -c reads. With several algorithms ticked it switches to the BSD form, one line per file and algorithm.

    Limitations

    • Each file can be at most 50 MB. For a disk image or a large archive, run sha256sum, shasum -a 256, or Get-FileHash on your own computer.
    • A checksum list in the sha256sum form cannot say whether a 64-character hash is SHA-256 or SHA3-256. Both are tried when both are ticked.
    • MD5, SHA-1, and CRC32 catch accidental damage but can be forged on purpose. Prefer the SHA-256 value when a download page offers several.
    • A checksum only proves the file matches the value on the page. If the page itself was tampered with, a signature check (GPG or similar) is needed.

    Frequently asked questions

    How do I verify a downloaded file?

    Drop the file here, paste the checksum from the download page into Expected checksum, and look for the Match badge on the row of the same algorithm.

    Are my files uploaded?

    No. The files are read and hashed inside your browser, and nothing about them is sent to our server.

    Why is there a 50 MB limit?

    It keeps the page fast on phones and older laptops. Larger files are better hashed with the checksum command your system already has.

    What is CRC32 used for?

    ZIP files, PNG images, and many network formats store a CRC32 to detect corruption. It is quick to compute, but it is not a security check, since a file can be changed to keep the same CRC32.

    Often used together with File Hash Generator.

    • SHA-256 Generator

      SHA-256 hash of text in hex or Base64, compared with a checksum when you paste one.

    • MD5 Generator

      MD5 hash of text, with a compare box for an expected checksum.

    • Hash Generator

      Hashes text with ten algorithms and compares the result with an expected hash.