Maintain an existing integration
Reproduce SHA1 only where the integration calls for it; use the correct message bytes.
Legacy SHA compatibility · Text
Calculate SHA1 from UTF-8, Hex or Base64 text. Compare a trusted expected digest locally.
SHA1 calculated
0 decoded bytes · UTF-8 · input changes update automatically
Browser-local hashing. Inputs masked in Clarity.
No account. No uploads. Just your browser.
| Algorithm | What differs |
|---|---|
| SHA1 | 160-bit SHA-1 output; broken collision resistance. |
| SHA256 | 256-bit SHA-2 output; a different algorithm and digest length. |
Start empty, paste UTF-8 text, or choose Hex or Base64 for encoded bytes.
SHA1 returns 40 lowercase hex characters. Copy digest preserves the whole output.
Paste a trusted reference, or enable HMAC only for a keyed protocol.
Reproduce SHA1 only where the integration calls for it; use the correct message bytes.
Read the algorithm label on the publisher’s archive before comparing an old SHA1 value.
A system may hash metadata together with content. A SHA1-looking identifier need not be the SHA1 of raw text.
SHA1 produces a 160-bit result: 40 hexadecimal characters. It remains useful for reproducing legacy fingerprints, but its collision resistance is broken. Prefer SHA256 for new integrity workflows.
A SHA1 file checksum describes raw bytes, not the extracted content of an archive. Recompressing the same documents changes the archive checksum. Use the publisher’s original file and the SHA1 algorithm.
Type or paste text for an automatic result. UTF-8 preserves whitespace and line endings. Hex accepts pairs of digits with optional whitespace; Base64 requires the standard padded alphabet. Invalid encoding stops calculation instead of hashing a different input.
The default result is the digest of zero bytes. The abc example contains exactly 61 62 63 in hex with no newline. Adding Enter changes the bytes and therefore the result.
Paste a complete hexadecimal expected value to see Match or Mismatch. Outer whitespace and uppercase hex are accepted; incomplete digests, filenames and embedded spaces are not.
HMAC-SHA1 calculates a keyed hash. Enable HMAC and enter the secret in its own encoding. An empty key is a valid key and differs from turning HMAC off. Keys are never saved or included in exported reports.
The SHA1 file checksum tool reads raw bytes in chunks and supports batch manifests. Text mode is limited to 8 MiB decoded input; use file mode for larger data.
No input is uploaded. Only a light/dark theme preference is stored. Copy and report downloads remain on your device.
SHA1 · 0 bytes · no HMAC. Empty input is not the same as no file selected.
da39a3ee5e6b4b0d3255bfef95601890afd80709Yes. This interface writes SHA1; the standard name is SHA-1. Both refer here to the 160-bit algorithm.
No. SHA-1 has broken collision resistance. Use a modern construction selected for your protocol rather than introducing SHA1 for compatibility-free new work.
Git object hashing includes an object header as well as content. This tool hashes only the bytes you supply; it does not construct Git objects.
They are different operations. HMAC-SHA1 requires the agreed key and message bytes; turning HMAC on is not a way to verify a plain SHA1 checksum.
UTF-8 hashes literal text. Hex and standard padded Base64 decode to bytes first. abc, Hex 616263 and Base64 YWJj represent the same bytes; invalid encodings stop calculation.
Yes. Text is not trimmed. A trailing newline, carriage return, byte-order mark or extra space changes the byte sequence and usually the result.
Paste exactly 40 hexadecimal characters. Uppercase and outer whitespace are accepted. Match means equality with your reference, not proof of a trustworthy source.
Text and keys stay in browser memory, not URLs or localStorage. The tool saves only your theme preference; Clarity may use its own identifiers, as explained in Privacy. Text mode accepts up to 8 MiB of decoded bytes; use file mode for larger inputs.