A fast, private hash generator that turns any text or file into SHA-1, SHA-256,
SHA-384 and SHA-512 hexadecimal digests — all at once. It is built for developers
verifying download checksums, sysadmins confirming file integrity, and anyone who needs
a quick, trustworthy fingerprint of a string or document without installing command-line
tools like sha256sum or certutil.
Everything runs locally in your browser using the native Web Crypto SubtleCrypto.digest
function, so confidential files, API payloads and secrets are never uploaded, logged or
stored. Pick the algorithms you care about, paste your text or drop your files, and the
matching hex digests appear instantly with one-click copy.
How it works
A cryptographic hash function reads your input as raw bytes and produces a fixed-length digest — 40 hex characters for SHA-1, 64 for SHA-256, 96 for SHA-384 and 128 for SHA-512. The function is deterministic and one-way: the same bytes always yield the same digest, and a single changed bit produces a totally different result, but you cannot work backwards from a digest to the original data.
For text, the tool UTF-8 encodes your string and hashes the resulting bytes, so the
output exactly matches what echo -n "..." | sha256sum would give on the command line.
For files, it reads the file into memory as an ArrayBuffer and digests it directly —
identical to the checksum a publisher lists next to a download. The optional verify
box normalises a pasted checksum (trims spaces, ignores case) and compares it against every
digest on screen, flagging a green match or a red mismatch immediately. It even detects the
likely algorithm from the length of the checksum you paste.
Example
Hashing the classic test string The quick brown fox jumps over the lazy dog gives:
| Algorithm | Digest (hex) |
|---|---|
| SHA-1 | 2fd4e1c67a2d28fced849ee1bb76e7391b93eb12 |
| SHA-256 | d7a8fbb307d7809469ca9abcb0082e4f8d5651e46d3cdb762d02d0bf37c9e592 |
Change even a single character — say drop the final letter — and every digest changes
completely, which is exactly why hashes are reliable integrity checks. To verify a download,
paste the publisher’s SHA-256 value into the verify box and look for the green tick next
to the SHA-256 row.
Every byte is processed in your browser — no text or file is ever uploaded or stored.