MD5 / SHA-256 Hash & Checksum Tool
Type or paste some text, or pick a file, and get its hash for the algorithm you choose. MD5, SHA-1, SHA-256 and SHA-512 are all supported, alongside HMAC and AES encryption.
All hashing happens in the browser and neither the text nor the file is uploaded, which is exactly what you need when verifying an installer or checking firmware.
Features
- Common Algorithms — Switch between MD5, SHA-1, SHA-256 and SHA-512 with the result updating instantly.
- File Hashes — Select a file and its checksum is computed automatically, so you can confirm a download arrived intact and untampered.
- HMAC — Keyed message authentication codes for verifying both the origin and the integrity of a message.
- AES Encryption — AES-CBC and AES-GCM modes for encrypting and decrypting text locally.
- Copy Result — Copy the full hash with one click and drop it into a verification script or a ticket.
How to use
- Enter the text to hash on the left, or load a file with the file picker.
- Choose MD5, SHA-1, SHA-256, SHA-512 or another algorithm on the right.
- The result appears in the output box automatically; click Copy to take it.
- For HMAC or AES, fill in the key when prompted.
FAQ
Is MD5 still usable?
MD5 collisions can be constructed deliberately, so it must not be used for signatures, certificates or password storage. It remains fine for non-adversarial integrity checks such as confirming a download completed, since it is faster than SHA-256 and almost every download page publishes MD5 values. For anything security-related, use SHA-256 or better.
Is it safe to compute hashes here?
Yes. The computation runs entirely inside your browser and neither the text nor the file leaves your machine. That said, if you are handling sensitive data in an untrusted environment, a local command-line tool is still the safer choice, since browser extensions or page scripts can add risk.
Why is a SHA-256 hash 64 characters long?
SHA-256 produces a 256-bit digest, and hexadecimal notation uses two characters per byte, so 32 bytes x 2 = 64 characters. By the same logic SHA-512 gives 128 characters and MD5 gives 32.
Why does the same string always produce the same hash?
Hash functions are deterministic: the same input must produce the same output, and that is precisely what makes them useful for verification. If you need unpredictable output, add a random salt to the input.