developer desk · hash generator
Hash a file, and check it against the published one.
SHA-256, SHA-384, SHA-512 and SHA-1 of text or a file. Paste the hash a download page published and the page says whether this is that file. The file is read in this tab and never uploaded.
Once the file checks out
The same random source that makes a hash worth trusting makes a strong password.
Generate a passwordQuestions
Is my file uploaded?
No. The browser reads the file and computes the hashes itself, with its built-in Web Crypto. Nothing about the file is sent anywhere.
Why is there no MD5?
Browsers do not provide MD5, because collisions for it have been easy to make for years. If you paste an MD5 the page says so rather than reporting a mismatch. Most download pages publish a SHA-256 beside it.
Which forms of the expected hash does it read?
Hexadecimal in either case, with or without spaces or a sha256: prefix, a whole line from a SHA256SUMS file with the file name after the hash, or an integrity value such as sha384- followed by Base64. The algorithm is worked out from the hash itself.