hex --hash
Hash generator
Checksums of text or files with MD5, SHA-1, SHA-256, SHA-384, SHA-512 and CRC32, all at once. Paste the checksum from a download page to see whether your file matches. The file never leaves your browser.
Type text, or open or drop a file.
| MD5broken, fine for checksums only | |
|---|---|
| SHA-1broken, fine for checksums only | |
| SHA-256the usual choice | |
| SHA-384 | |
| SHA-512 | |
| CRC32error detection, not security |
Paste a checksum to check it against the hashes above.
Which one to use
To check that a download arrived intact, use whatever the publisher lists, usually SHA-256. For anything new,SHA-256 is the safe default.
MD5 and SHA-1 are broken: people can craft two different files with the same hash. They still catch accidental damage, but they prove nothing about tampering. CRC32 was never meant for security; it is the quick error check inside ZIP, PNG and gzip.
None of these are for storing passwords. Password storage needs a slow, salted function such as Argon2 or bcrypt.