~/tools / hash-generator
// security

Hash Generator

Type text or drop a file (an ISO, a firmware image) to get its MD5 and SHA digests. Paste the vendor's checksum in the compare box to verify a download.

● hashed in your browser — files are never uploaded

Digests

Which hash should I use?

  • SHA-256 — the default today for file checksums, certificates and integrity checks.
  • SHA-384 / SHA-512 — longer digests, common in TLS cipher suites and some firmware signatures.
  • SHA-1 and MD5 — broken for collision resistance. Fine to match an old checksum, never for signatures or anything security-relevant.

Hashes are not for passwords

A plain SHA or MD5 is far too fast for storing passwords: use a dedicated slow function such as Argon2id, scrypt or bcrypt. A hash is also not encryption — it cannot be reversed, only recomputed and compared.

Verifying a download

Drop the file, paste the checksum published by the vendor into the compare box: the matching algorithm is highlighted. On the command line the equivalents are sha256sum file (Linux), shasum -a 256 file (macOS) and Get-FileHash file (PowerShell).