GUIDE

Hashing vs encryption

Checksums and encryption solve different problems.

On this page

Check a file without changing it

A hash turns bytes into a fixed-size value. The same bytes and algorithm give the same value. Compare it with a checksum from a trusted source; a matching hash alone does not identify who published the file.

SHA-256 of abc: ba7816bf8f01cfea414140de5dae2223b00361a396177a9cb410ff61f20015ad

Know what encryption does

Encryption is designed to recover the original data with the right key. A hash has no decryption key. Neither a plain checksum nor encryption alone establishes a file's trusted origin.

Use the right password tool

MD5 and SHA-1 are legacy checksums. General-purpose SHA hashes are not suitable password-storage functions either. Use a dedicated password-storage design in applications; use the Password Generator to create a fresh secret, not to store it.