MB Networks
Hash · Checksum · Integrity
Verify file integrity in your browser
Drop a file or paste text — compute MD5, SHA-1, SHA-256, or SHA-512. Nothing leaves your device.
Drop a file or paste text below to compute its hash.
SHA-256
Computing…
Input
Drop file here or click to browse
Large files (ISO images, backups) are processed locally — nothing is uploaded
SHA-256 is recommended for integrity checks. MD5 and SHA-1 are provided for legacy compatibility only.
What a checksum actually proves
A cryptographic hash function takes a file of any size and produces a fixed-length fingerprint — change even one bit of the file and the hash comes out completely different. Comparing a downloaded file's hash against the one the publisher listed confirms the file transferred intact and matches exactly what they published; it does not confirm the file is safe or malware-free, only that it's identical to the source.
Which algorithm to use
SHA-256 is the current standard for file integrity verification — use it if the publisher offers a choice. MD5 and SHA-1 are both cryptographically broken (collisions are practical to engineer) and shouldn't be trusted for anything security-sensitive, but they're still common for basic accidental-corruption checks on older software distributions where that's all that's offered.
Why do MD5 and SHA-1 still show up if they're broken?
They're broken specifically for security purposes — an attacker can deliberately craft two different files with the same MD5/SHA-1 hash. For catching accidental corruption during a download (the far more common real-world case), they still work fine; just don't rely on them to detect deliberate tampering.
Why don't my file's hash and the published hash match?
Either the download is corrupted/incomplete, or you're comparing against the wrong file version. Re-download and recheck first — that resolves the overwhelming majority of mismatches — before assuming anything more serious.
Does this tool upload my file anywhere to check it?
No — the hash is computed entirely in your browser using the Web Crypto API. The file itself never leaves your device.
Related tools
Security
Base64 Encoder / Decoder
Encode and decode Base64 strings in your browser. Supports standard and URL-safe Base64, plus hex input/output. Nothing leaves your device.
Open →Security
JWT Decoder
Decode and inspect JWT tokens instantly in your browser. See header, payload, and expiry status. No signature verification — nothing is sent anywhere.
Open →Security
Password Generator
Generate strong random passwords and diceware-style passphrases with entropy display. Uses cryptographically secure randomness. Nothing is logged or sent.
Open →All computation happens in your browser. No data is sent to any server.