All tools / Security & identifiers
Hash and checksum generator
Hash text or a file, then paste an expected checksum to verify a download.
Common questions
Which hash should I use?
Use SHA-256 for checksums and integrity checks. MD5 and SHA-1 are broken for security (collisions can be forged), but still appear in older checksum files and S3 ETags.
Can I hash passwords with this?
Do not store passwords as plain SHA or MD5 hashes. Use a slow password hash such as Argon2id, bcrypt or scrypt.
How do I check a hash in the terminal?
sha256sum file on Linux, shasum -a 256 file on macOS, and Get-FileHash file in PowerShell.
What is an HMAC?
A hash mixed with a secret key. It proves a message came from someone who knows the key, which is how webhook signatures from GitHub, Stripe and Slack work.