File Hash Calculator: SHA-1, SHA-256, SHA-384, SHA-512

How to use this tool

1. Choose a file. Drop any file onto the page or use Browse. The file remains in your browser.
2. Review the SHA digests. SHA-1, SHA-256, SHA-384, and SHA-512 are calculated together. Copy the digest that uses the same algorithm as the publisher checksum.
3. Compare the vendor checksum. Paste the checksum or a common checksum-file line into Expected checksum. The tool ignores hexadecimal case and common visual separators, then reports a match or mismatch.
4. Confirm the checksum source. A match confirms the file bytes agree with the pasted digest. Obtain that digest from a trusted publisher channel because a checksum alone does not prove who created it.

File Hash Calculator

Drop a file or choose it from your device to calculate SHA-1, SHA-256, SHA-384, and SHA-512 digests at once. The browser reads the selected file and calls its built-in Web Crypto API; the file bytes stay in this tab and are not uploaded. A digest is a fixed-length fingerprint of the file contents: the same bytes produce the same result for a given algorithm, while even a small edit normally produces a different digest.

Algorithms calculated here

The page calculates all four SHA digests together, so there is no algorithm selector. It does not calculate MD5 or BLAKE2. If an older download provides only an MD5 value, use the Hash Generator for that legacy workflow. Neither SHA nor MD5 is a password-storage function: general-purpose hashes are fast, while password storage needs a purpose-built, deliberately costly function such as Argon2id, scrypt, or bcrypt.

Verify a downloaded file

For example, after downloading an installer and its publisher's SHA256SUMS file, drop the installer here and paste the SHA-256 line into Expected checksum. The verifier detects the SHA algorithm from the digest length, ignores letter case and common spaces, colons, or dashes, and can read common filename labels. A matching result identifies which digest agrees with the pasted value and highlights that row; a mismatch means the bytes differ from that value.

A checksum match confirms only that your file agrees with the checksum you supplied. It does not authenticate the publisher or prove that the checksum was obtained from a legitimate source. Get expected values through a trusted publisher channel, and prefer a signed release when you need to establish who created the file.

Large files and command-line alternatives

Web Crypto's digest operation needs the complete file in memory; this tool reads it once and then calculates each algorithm. The displayed duration includes file reading and hashing. A warning appears for files over 200 MB, but the available memory depends on the device and browser. For files approaching a gigabyte, a local command-line utility can be more reliable: Windows provides Get-FileHash file.zip -Algorithm SHA256, macOS provides shasum -a 256 file.zip, and Linux commonly provides sha256sum file.zip.