What a hash does
A cryptographic hash function turns input data into a fixed-length digest. Even a small change to the input normally produces a different digest. Hashing is not encryption, and this tool is not intended for storing passwords.
Hash text or a file
Enter text or select a file, choose an algorithm, then generate the digest. SHA-256, SHA-384 and SHA-512 are modern SHA-2 options. SHA-1 remains available for compatibility with existing checksums and should not be used for new security-sensitive work.
Files up to 100 MB can be hashed locally. This version uses the browser Web Crypto API, which processes file bytes in memory rather than streaming progress.
Hex, Base64 and checksum comparison
Hex and Base64 represent the same digest bytes. Switching formats does not generate a different hash. To check a checksum, enter the expected value in the selected format and compare it with the generated digest.
A match means the calculated digest equals the expected value you supplied. It does not, by itself, prove that a file is safe, malware-free, trustworthy or authentic. For source verification, obtain the expected checksum from a trusted source.
Your input stays in your browser
Text and files are hashed in your browser and are not uploaded to UtiliBits. The page does not put your text, filename, generated hash or expected checksum in its URL.
Frequently asked questions
What is a hash?
A cryptographic hash function produces a fixed-length digest from input data. A small input change normally produces a different digest.
Which algorithms can I use?
The tool supports SHA-256, SHA-384 and SHA-512, plus legacy SHA-1 for compatibility with existing checksums.
Is hashing the same as encryption?
No. Hashing produces a digest for comparison; it does not encrypt the original text or file.
Can I hash a file?
Yes. You can hash a file up to 100 MB locally in your browser. This version processes the file bytes in memory.
How do I verify a checksum?
Generate a digest using the same algorithm and format as the expected checksum, enter that checksum, then select Verify checksum.
What does a matching checksum prove?
It means the calculated digest matches the value you supplied. It does not establish file safety or authenticity unless the expected value came from a trusted source.
Why is SHA-1 marked legacy?
SHA-1 remains available to check existing SHA-1 checksums. Do not use it for new security-sensitive work.
Are my text and files uploaded?
No. UtiliBits hashes text and files in your browser without uploading them.