/hash MD5, SHA-1, SHA-256 & SHA-512
Hash any string or file to all four digests at once — from your terminal or your browser. The quickest way to fingerprint a value or verify a download without remembering shasum flags.
curl curlhub.sh/hash?data=hello
Usage
With curl — a string, piped stdin, or a whole file
curl curlhub.sh/hash?data=hello
printf 'hello' | curl --data-binary @- curlhub.sh/hash
curl --data-binary @ubuntu-24.04.iso curlhub.sh/hash
With the CLI
curlhub hash?data=hello
cat config.yml | curlhub hash
Structured output for scripts
curl -s 'curlhub.sh/hash?data=hello' -H 'Accept: application/json'
Output
curl curlhub.sh/hash?data=hello
md5 5d41402abc4b2a76b9719d911017c592
sha1 aaf4c61ddcc5e8a2dabede0f3b482cd9aea9434d
sha256 2cf24dba5fb0a30e26e83b2ac5b9e29e1b161e5c1fa7425e73043362938b9824
sha512 9b71d224bd62f3785d96d46ad3ea3d73319bfbc2890caadae2dff72519673ca7…
Parameters
| Input | What it does |
|---|---|
?data= | The string to hash. URL-encode anything spicy. Omit it and pipe stdin or POST a body instead. |
--data-binary @- | Read the value from stdin — pipe a file or command output. Binary-safe. |
--data-binary @file | Hash the contents of a file directly (checksum a download). |
Accept: application/json | Return a JSON object of {algorithm: digest} instead of text. ?format=json works too. |
Recipes
Verify a download
curl --data-binary @app.dmg curlhub.sh/hash | grep sha256
Then compare the digest to the one on the vendor's release page. No local shasum flag-guessing.
Fingerprint config drift in CI
cat deploy.yml | curlhub hash | grep sha256 > .fingerprint