Which hash algorithm should I use?

Use SHA-256 or SHA-512 for security-sensitive work. MD5 and SHA-1 are fine for non-security tasks like file integrity checks but should not be used for passwords or signatures.

Are my files uploaded to a server?

No. Hashing happens locally in your browser using the Web Crypto API — files never leave your device.

Can I verify a downloaded file's checksum?

Yes. Paste the expected hash into the verify field and drop the file — MyToolsBag confirms whether the hashes match.

MyToolsBag

Search All Tools

Hash Generator

Generate MD5, SHA-1, SHA-256, SHA-384, SHA-512 and CRC32 hashes from text or files. Verify a hash against known input. Everything runs in your browser — nothing uploads.

Enter text to hash

0 chars

Verify a hash

Paste an expected hash and the original text — we'll compute the hash locally and tell you if they match.

Original text

Hash to verify

Algorithm

Common use cases

Where hashes show up in everyday development work.

Password storage

Hash user passwords with SHA-256 or stronger before storing so leaked databases can't reveal plaintext.

File integrity

Publish a SHA-256 of a download so users can verify the file wasn't tampered with in transit.

Cache & etags

Use short hashes like CRC32 or MD5 as fingerprints for asset URLs and HTTP ETags.

Deduplication

Compare content hashes instead of full files to detect duplicates across large datasets.