File Hash Calculator (MD5, SHA-256)
Calculates the MD5, SHA-1, SHA-256, SHA-384, and SHA-512 hashes of a file. Compare them with the checksum published by the source to confirm a download is intact and unmodified. Files are processed in your browser and are never uploaded. To hash text instead, use the Hash Generator.
🔒 Runs in your browser · Your data is never sent to a server
Drag and drop files here, or pick them with the button.
How to use
- Drag and drop the files you want to hash into the box, or choose them.
- The MD5, SHA-1, SHA-256, SHA-384, and SHA-512 hashes are listed for each file.
- To verify a download, paste the hash published by the source into the compare field to see whether it matches.
- Use the Copy button to copy any hash.
Notes
- Each file is read fully into browser memory to be hashed, so files are limited to 256 MB each. Larger files cannot be calculated.
- MD5 and SHA-1 have known weaknesses and are not suitable for detecting deliberate tampering. Use SHA-256 or stronger where security matters.
- A match is meaningless if the published hash itself was tampered with. Compare against a hash published in a trusted place separate from the file.
- Files that look identical still produce very different hashes if even one byte differs.
Glossary
Hash (checksum)
A fixed-length "fingerprint" computed from a file’s contents. Changing even one byte produces a completely different value.
SHA-256
One of the most widely used hash functions today, producing a 256-bit value (64 hexadecimal digits). Software download pages commonly publish it.
MD5
An older 128-bit hash function (32 hexadecimal digits). It cannot detect deliberate tampering, but is still used to check for corruption in transit.
FAQ
Are my files uploaded to a server?
No. Files are only read into your browser’s memory to be hashed and are never sent anywhere. The tool keeps working even without a network connection.
How do I check that a downloaded file is correct?
Paste the hash (such as SHA-256) shown on the download page into the compare field. The algorithm is detected from the length, and a match or mismatch is shown.
Can I hash large files?
Files up to 256 MB each. The whole file is loaded into memory to be hashed, so anything larger cannot be calculated.
Should I look at MD5 or SHA-256?
Match whatever the publisher provides. If your goal is detecting tampering, prefer a source that publishes SHA-256 or stronger; treat MD5 as a check for corruption in transit.
Why does what looks like the same file give a different hash?
A hash is computed from the exact bytes. Differences you cannot see, such as line endings, text encoding, or updated metadata, change the value.
Share this page