Generate SHA-1, SHA-256, SHA-384, and SHA-512 hashes of text or files.
A cryptographic hash is a fixed-length fingerprint of data: change a single byte of the input and the output changes completely. This free hash generator computes SHA-256, SHA-1, SHA-384, and SHA-512 digests from any text you type or any file up to 50 MB, making it a quick sha256 hash generator for checksum verification, cache keys, content fingerprints, and debugging systems that compare hashes.
Hashing is done with the Web Crypto API built into your browser, which means two things. First, the results are the genuine, standards-compliant digests — identical to what sha256sum or openssl would produce for the same bytes. Second, your input never leaves your machine: text and files are hashed locally, so it is safe to checksum private documents or paste configuration values.
The most common use is verifying a download: hash the file you received and compare the hex string against the checksum published by the vendor. If they match byte for byte, the file was not corrupted or tampered with in transit. Pick a single algorithm from the dropdown, or tick Show all algorithms to compute every supported digest at once and copy whichever one you need.
Use the tabs to hash typed text or a file from disk. Files up to 50 MB are supported and are read locally, never uploaded.
Type or paste into the Text box, or click the file drop area to choose a file. The hash recomputes automatically whenever the input changes.
Select SHA-256, SHA-1, SHA-384, or SHA-512 from the Algorithm dropdown, or tick Show all algorithms to see every digest at once.
Each computed hash is shown as a lowercase hex string with its own Copy button. Compare it against a published checksum or paste it where you need it.
No. It uses the browser’s Web Crypto API, which deliberately excludes MD5 because the algorithm is cryptographically broken. For any security-relevant purpose use SHA-256 or stronger; if you only need MD5 to match a legacy checksum, a command-line tool like md5sum can produce it.
Not for security purposes. Practical collision attacks against SHA-1 have existed since 2017, so it should not be used for signatures or integrity guarantees against attackers. It remains fine for non-adversarial uses like cache keys or matching legacy checksums.
Both belong to the SHA-2 family. SHA-256 produces a 256-bit (64 hex character) digest and SHA-512 a 512-bit (128 hex character) digest. Both are considered secure; SHA-256 is the most widely used default.
No. Cryptographic hashes are one-way functions. The only way to recover an input is to guess candidates and hash each one, which is why short or common passwords are crackable even when hashed, while long random inputs are not.
Yes. Hashing runs locally via the Web Crypto API in your browser; the file is read into memory on your machine and its contents are never transmitted to any server.
Any difference in bytes changes the hash entirely. Common causes are a corrupted or incomplete download, comparing against a checksum for a different version, or hashing text with different line endings or a trailing newline.
ReSlug supports password-protected and time-limited URLs so you control who reaches the destination.