Developer & Security
Compute a digital fingerprint of text or a file, or confirm a downloaded file hasn’t changed by comparing its hash with the published value.
Free · no sign-up · runs in your browser · updated
Enter some text or choose a file to see its hash.
MD5 and SHA-1 are not safe for security purposes; use them for integrity checks only.
Bcrypt is deliberately slow and uses a random salt, so hashes of the same password are always different. To check whether a password matches, use Verify mode.
0/72 bytes
Each increase of 1 makes the process twice as slow. 10–12 is common on servers.
Type some text, or choose a file.
Copy the hash from the algorithm you need.
To verify, paste the expected hash into the comparison box and see whether it matches.
For passwords, use the Bcrypt section: create a hash with the cost factor of your choice, or verify a password against an existing hash.
Hashes are used to check file integrity (the hash of a downloaded file should match the one the provider publishes), detect duplicates, build cache keys, and store passwords on the server side (with a dedicated slow, salted algorithm, not a raw SHA).
MD5 and SHA-1 have been proven vulnerable to collisions, so they must not be used for security purposes such as digital signatures or password storage. They are still common for non-security integrity checks. For security use the SHA-2 family, such as SHA-256 or SHA-512.
No. A hash is a one-way function. Someone can only guess the original data by trying possibilities and comparing hashes, so short, easy-to-guess data is still at risk.
Choose the file, then paste the official hash from the provider’s site into the comparison box. If it matches for the same algorithm, your file is identical to the original.
Usually because of a trailing line break, extra spaces, or a different character encoding. This tool uses UTF-8 and adds nothing to your text.
No. MD5 is too fast and too weak, so it is easy to crack. Use a password-specific algorithm such as Argon2, bcrypt or scrypt on the server side.
Bcrypt adds a random salt each time a hash is created, and the salt is stored inside the hash. That is why the result is always different. To check a password, use Verify mode instead of comparing hash text.
No. The file is read and hashed in your browser.
Need more than tools?
These tools are only a small part of what Tipamedia can build. Tell us what you need and we will help you work out the next step.