Hash Verify

A hash is the digital fingerprint of a file or text: any number of bytes is turned into a fixed, short string. Change even a single bit and the hash looks completely different. That is exactly why reputable providers publish a SHA-256 checksum next to their downloads - and with Hash Verify you recompute it instead of trusting blindly.

The tool works in three modes. In hash mode you simply compute the checksum for your input. In verify mode you additionally enter the expected hash, and the tool tells you with a clear green or red whether it matches - no more manual character-by-character comparison. In HMAC mode a secret key is added so you can recompute signed messages and API signatures.

Whether text or file, you choose via the tabs. For text you type or paste directly. For files you drag and drop them or pick them - large files too, because the computation runs right in your browser. And when you want to check several files at once, batch mode handles it in one pass and lets you export the results as a text list.

The common algorithms are supported, from MD5 through SHA-1 to the whole SHA-2 family. An honest word on this: MD5 and SHA-1 are considered cryptographically broken and are unsuitable for security purposes like signatures. For simple integrity checks and reconciling old checksums that still exist, they remain useful - which is why they are on board, but with the knowledge of what you should no longer use them for. For anything security-relevant, use SHA-256 or larger.

For HMAC you can choose the encoding of the result so the output matches what your counterpart expects. Every result can be copied with one click, and a history view remembers your recent computations within the session so you do not have to retype everything.

The decisive point: everything happens client-side via your browser's Web Crypto API. No file, no text, no key is ever sent to a server. That is not just fast, it is the only serious way to compute hashes - because uploading a checksum to have it verified would defeat the whole point. No account, no signup, no data leaving your device.