Choose an algorithm
Use SHA-256 unless the trusted source specifically publishes a SHA-384 or SHA-512 value.
Calculate a SHA-256, SHA-384, or SHA-512 checksum for text or a file. Processing stays in your browser.
Generate a cryptographic fingerprint for a download, document, archive, or block of text without uploading the source data.
Use SHA-256 unless the trusted source specifically publishes a SHA-384 or SHA-512 value.
A selected file takes priority over the text box. The browser reads the bytes locally.
Match the generated hexadecimal value with the checksum from the trusted publisher. Any difference means it does not match.
A cryptographic hash is a fixed-length fingerprint calculated from input bytes, computed here with the browser's built-in Web Crypto API rather than a JavaScript re-implementation. Even a one-byte change produces a different result, making checksums useful for detecting accidental corruption or confirming that a download matches a value published by its vendor.
A matching checksum confirms that two byte sequences are the same; it does not independently prove that the publisher or download source is trustworthy. Obtain the expected checksum through an official, authenticated source.
This tool intentionally excludes obsolete MD5 and SHA-1 choices.
No. Your browser reads the file and calculates the checksum locally.
A secure hash is one-way. It is not encryption and cannot be decoded back into the original input.
Confirm that the same algorithm was used and that the file was not renamed through a process that changed its contents. A single changed byte produces a different value.
No. It proves that the bytes match the reference value. The reference must still come from a trusted publisher.