Frequently asked questions
Is my data uploaded anywhere?
No. Hashes are computed entirely in your browser, including files, so nothing is uploaded. It works offline once loaded, apart from a small library fetched once for MD5.
Which algorithms are supported?
MD5, SHA-1, SHA-256, SHA-384 and SHA-512, for text and files, with an optional HMAC keyed hash for the SHA algorithms.
What is the HMAC key for?
An HMAC combines your secret key with the message to produce a keyed hash, which lets you verify that a message came from someone who knows the key and has not been tampered with.
Which algorithm should I use?
Use SHA-256 or stronger for anything security related. MD5 and SHA-1 are only suitable for non-security checksums, and for passwords you should use a dedicated password hashing scheme.
Can I verify a downloaded file?
Yes. Choose the file, pick the algorithm the publisher listed, and compare the result with their published checksum to confirm the file is intact.