Which algorithm should I use?

SHA-256 (or SHA-512) whenever security matters — it is the standard way to verify a download. MD5 and SHA-1 are broken against deliberate tampering, so they only prove a file wasn't accidentally corrupted. CRC-32 is just a quick error check. They are included because many sites still publish MD5 or SHA-1 sums.

No. Files are read and hashed on your device. SHA-1, SHA-256, SHA-384 and SHA-512 use your browser's built-in crypto, and MD5 and CRC-32 are computed by Documateo's own code, also locally.

How does comparing a hash work?

Paste the expected hash — spaces, colons and capital letters are ignored. The algorithm is identified from the length (8 characters CRC-32, 32 MD5, 40 SHA-1, 64 SHA-256, 96 SHA-384, 128 SHA-512) and compared with the hash computed from your file or text. You get a clear match or mismatch.

What is a checksum list and how do I verify against one?

Many projects publish a file like SHA256SUMS with one 'hash filename' line per file. Hash your downloaded files, paste that list into the verify box, and each file is marked as matching or not by name. Files in the list that you didn't provide are reported too.

Why doesn't my hash match the website's?

Any change, even one byte, gives a completely different hash. The usual reasons are an incomplete or interrupted download, a different version of the file, comparing against a different algorithm, or — for text — a stray space or line break at the end.

Is there a file size limit?

Up to 200 MB per file and 25 files per batch. The SHA algorithms are calculated by the browser on the whole file at once, which is why there is a limit.

Utility

File Hash Generator

SHA-256, SHA-512, SHA-1, MD5 and CRC-32 for files or text — to verify a download, compare two files, or check a whole folder against a checksum list. Done on your device; nothing is uploaded.

Algorithms

MD5, SHA-1 and CRC-32 are fine for spotting a corrupted download, but they can be forged — use SHA-256 or SHA-512 when security matters.

Drag a file here, or click to browse

Multiple files supported · Max 200.0 MB

How it works

1
Choose Files or Text, and tick the algorithms you want (SHA-256, SHA-1 and MD5 are on by default).
2
Add up to 25 files (each up to 200 MB), or type your text, and generate the hashes.
3
To check a download, paste the hash the publisher gives you — it is recognised by its length and compared automatically.
4
For many files at once, paste a SHA256SUMS-style list to verify them all, or copy a checksum list or download a CSV.

File Hash Generator — frequently asked questions

Which algorithm should I use?: SHA-256 (or SHA-512) whenever security matters — it is the standard way to verify a download. MD5 and SHA-1 are broken against deliberate tampering, so they only prove a file wasn't accidentally corrupted. CRC-32 is just a quick error check. They are included because many sites still publish MD5 or SHA-1 sums.
Is my file uploaded?: No. Files are read and hashed on your device. SHA-1, SHA-256, SHA-384 and SHA-512 use your browser's built-in crypto, and MD5 and CRC-32 are computed by Documateo's own code, also locally.
How does comparing a hash work?: Paste the expected hash — spaces, colons and capital letters are ignored. The algorithm is identified from the length (8 characters CRC-32, 32 MD5, 40 SHA-1, 64 SHA-256, 96 SHA-384, 128 SHA-512) and compared with the hash computed from your file or text. You get a clear match or mismatch.
What is a checksum list and how do I verify against one?: Many projects publish a file like SHA256SUMS with one 'hash filename' line per file. Hash your downloaded files, paste that list into the verify box, and each file is marked as matching or not by name. Files in the list that you didn't provide are reported too.
Why doesn't my hash match the website's?: Any change, even one byte, gives a completely different hash. The usual reasons are an incomplete or interrupted download, a different version of the file, comparing against a different algorithm, or — for text — a stray space or line break at the end.
Is there a file size limit?: Up to 200 MB per file and 25 files per batch. The SHA algorithms are calculated by the browser on the whole file at once, which is why there is a limit.