A file hash is a fixed-length string computed from the file's contents using a hash function. The same file always produces the same hash; any modification — even a single byte — produces a completely different hash. This makes hashes reliable for verifying file integrity.

Is my file uploaded to a server?

No. The file is read in your browser using the FileReader API and hashed using the Web Crypto API. Nothing leaves your device.

Which hash algorithm should I use?

Use SHA-256 for general integrity verification — it is the current standard. SHA-1 is provided for compatibility with older checksums but is considered cryptographically weak for security purposes. SHA-512 provides stronger collision resistance for high-security contexts.

How do I verify a downloaded file?

Download the file and the published checksum (usually a .sha256 or .txt file from the download page). Open this tool, select your file, and compare the computed SHA-256 hash to the published one. They must match exactly — character for character.

What does it mean if the hash does not match?

A mismatch means the file was corrupted during download or tampered with after the publisher computed the hash. Delete the file and download it again from a trusted source.

Can I hash very large files?

Yes. The tool streams the file through the hash function in chunks using the Web Crypto API, so it works with files of any size without loading the entire file into memory at once.

Is SHA-256 the same as MD5?

No. MD5 is an older algorithm with known collision vulnerabilities. SHA-256 is part of the SHA-2 family and is considered cryptographically secure for integrity checking. Many software publishers now provide SHA-256 checksums in addition to or instead of MD5.

Can I verify a hash without downloading the file?

No — the hash is computed from the file's contents, so you must have the file locally to compute and verify its hash.

Privacy Tools /

File hash calculator

Compute SHA-256, SHA-1, and SHA-512 checksums of any file to verify its integrity after download. Paste a known hash below to compare automatically.

100% in your browser. Files never leave your device.

Drag & drop any file here

Choose file

How to use

Drop any file into the upload area or click Choose file.
The tool computes SHA-256, SHA-1, and SHA-512 hashes simultaneously.
Copy the relevant hash and compare it to the checksum published by the file's provider.
Or paste the known hash into the compare field — the tool highlights a match or mismatch automatically.

Common use cases

Software verification — confirm downloaded installers match the publisher's checksum before running.
Linux ISO verification — compare SHA-256 checksums of OS images before flashing to USB.
Document integrity — create a hash of a signed document to detect future tampering.
Backup verification — compare hashes of backup files against originals to detect corruption.

Also see: File Metadata Cleaner to strip hidden data from documents, and Image Redactor to remove sensitive areas from images.

よくある質問

What is a file hash?: A file hash is a fixed-length string computed from the file's contents using a hash function. The same file always produces the same hash; any modification — even a single byte — produces a completely different hash. This makes hashes reliable for verifying file integrity.
Is my file uploaded to a server?: No. The file is read in your browser using the FileReader API and hashed using the Web Crypto API. Nothing leaves your device.
Which hash algorithm should I use?: Use SHA-256 for general integrity verification — it is the current standard. SHA-1 is provided for compatibility with older checksums but is considered cryptographically weak for security purposes. SHA-512 provides stronger collision resistance for high-security contexts.
How do I verify a downloaded file?: Download the file and the published checksum (usually a .sha256 or .txt file from the download page). Open this tool, select your file, and compare the computed SHA-256 hash to the published one. They must match exactly — character for character.
What does it mean if the hash does not match?: A mismatch means the file was corrupted during download or tampered with after the publisher computed the hash. Delete the file and download it again from a trusted source.
Can I hash very large files?: Yes. The tool streams the file through the hash function in chunks using the Web Crypto API, so it works with files of any size without loading the entire file into memory at once.
Is SHA-256 the same as MD5?: No. MD5 is an older algorithm with known collision vulnerabilities. SHA-256 is part of the SHA-2 family and is considered cryptographically secure for integrity checking. Many software publishers now provide SHA-256 checksums in addition to or instead of MD5.
Can I verify a hash without downloading the file?: No — the hash is computed from the file's contents, so you must have the file locally to compute and verify its hash.

このツールの問題を報告