Free local SHA-256, SHA-1, SHA-512 & MD5 calculator
Verify a file’s
exact checksum.
Calculate SHA-256, SHA-1, SHA-512 and MD5 hashes locally in your browser and compare against an expected checksum without uploading files.
Drop files here to hash them.
Or choose up to 50 files from your device. Hashes are computed locally on your device.
Up to 50 files per batch, 200 MB each. Uses Web Crypto for SHA-256, SHA-1 and SHA-512.
Use is subject to our terms. Read the privacy policy.
What a file hash tells you
A cryptographic hash function reads every byte of a file and produces a fixed-length hexadecimal digest—a digital fingerprint. Changing even a single bit inside a file produces a completely different hash.
Software publishers and security teams publish SHA-256 or SHA-512 checksums alongside downloads so you can verify that your local copy arrived intact and matches the original release byte for byte.
Comparing a checksum
Paste the expected hash into the Verify checksum box above before or after choosing your files. The calculator strips spaces and 0x prefixes, detects whether the pasted digest is MD5 (32 hex characters), SHA-1 (40), SHA-256 (64) or SHA-512 (128), and highlights whether each file matches.
Need to check what format a file actually is first? Use the free file type checker or inspect its raw header in the in-browser hex viewer.
Common questions
Are my files uploaded to compute their hash?
No. Hashing runs entirely inside your browser using the Web Crypto API. If you choose to click “Look up SHA-256 on VirusTotal”, only the hash string is opened on VirusTotal in a new tab—never the file itself.
Which hash algorithm should I use to verify a download?
Use SHA-256 or SHA-512 whenever the publisher provides it. MD5 and SHA-1 are still shown for compatibility with older checksum lists, but both are vulnerable to collision attacks and should not be relied on against tampering.
Does renaming a file change its SHA-256 or MD5 hash?
No. Cryptographic hashes are computed strictly from the file’s internal bytes, not its filename or timestamps. If two files with different names produce the exact same SHA-256 hash, their contents are byte-for-byte identical.