Hash Generator and File Checksum

How to use the hash generator and file checksum

1. Type or paste text into the box. The hashes update as you type.
2. Or choose a file to get its checksum. Its name and size appear under the picker, with a Remove button. The text box is ignored while a file is selected.
3. Pick how to show the hashes: lowercase hex, uppercase hex or Base64.
4. To check a download, paste the checksum you were given into the compare box and read the result, then copy any hash with its Copy button.

What a hash is

A hash function turns any input into a short fixed-length fingerprint. The same input always gives the same hash, and a tiny change gives a completely different one. The tool offers SHA-1, SHA-256, SHA-384 and SHA-512, which give 40, 64, 96 and 128 hexadecimal characters.

Text is converted to UTF-8 bytes first, so accents and emoji work, and a trailing line break counts as a character. That is why two texts that look the same can have different hashes. For a file, the hash covers the exact bytes in the file.

Checking a download

Publishers often list a checksum next to a download. Choose the file, paste the published value into the compare box, and the tool tells you whether it matches one of the hashes and which algorithm it belongs to. A match shows the bytes are the same as the ones that were hashed. It does not show the publisher is trustworthy, so get the checksum from a source you trust.

Hashes are not a way to store passwords. A plain SHA hash is fast to guess against, and storing passwords needs a slow, salted method made for that purpose. SHA-1 is shown only for checking older checksums, and it should not be used for new security work. MD5 is not offered. For other encodings see the Base64 encoder and decoder, the password generator and the UUID generator.

Privacy, limits and how it works

Everything runs in your browser using its built in Web Crypto API. Neither your text nor your file is uploaded. A file can be up to 100 MB, and text up to 5 million characters, because the whole input is held in memory while it is hashed. The tool needs a secure page and a current browser, and it shows a message if the feature is missing.

Nothing is saved. When you close the tab, the text and results are gone. The results appear below the box in a wrapping block so that long hashes never run off the screen, and each has its own Copy button.

Assumptions and limits

• Hashes are calculated with the browser's Web Crypto API, using SHA-1, SHA-256, SHA-384 and SHA-512 only.
• Text is hashed as UTF-8 bytes, including any line breaks.
• Files are limited to 100 MB and text to 5 million characters, and nothing is uploaded.
• A matching hash shows identical bytes. It does not prove who made the file.

Formulas reviewed October 10, 2026. See the calculation methodology for how SumPanda rounds, tests and sources its formulas.

Frequently asked questions