Question 1

Which hash should I use?

Accepted Answer

Use SHA-256 for integrity and checksums; it is the modern default (`sha256sum`). MD5 and SHA-1 are broken for security (collisions are practical) but still appear on download pages, so they are here for verification, not for protecting anything.

Question 2

Can I verify a downloaded file?

Accepted Answer

Yes. Drop the file in, pick the algorithm the project publishes, and paste their expected checksum into the verify box. The tool highlights a match or mismatch. The file is read locally and never uploaded.

Question 3

Is a hash the same as encryption?

Accepted Answer

No. Hashing is one-way: you cannot recover the input from the hash. Encryption is reversible with a key. Hashes are for integrity and fingerprints; never use a raw hash to store passwords (use bcrypt/argon2 instead).

Question 4

Is my data uploaded anywhere?

Accepted Answer

No. SHA hashing uses the browser Web Crypto API and MD5 runs in JavaScript, both locally. Nothing leaves your machine.

Hash and Checksum Generator

When you'll reach for this

Verifying a download

Fingerprints and cache keys