Inspect
Image hash checker
Get the SHA-256 of an image's exact bytes, copy it, or confirm that a file is exactly the one you expected.
Equal SHA-256 hashes mean identical bytes. Any change, even an invisible one, gives a different hash.
Results
Verify a file
When a hash helps
Photographers, archives and evidence workflows publish hashes so anyone can confirm that a file has not changed since it was recorded. Courts, insurers and agencies may ask for the SHA-256 of a photo you send. Comparing two hashes is also the fastest way to know whether two files are truly the same.
Two kinds of hash
Cryptographic vs perceptual
A cryptographic hash (SHA-256) identifies exact bytes: re-saving a photo changes it. A perceptual hash describes what a picture looks like and stays similar after resizing or recompression, which is what finding look-alike photos needs.
FAQ
Image hash questions.
What is an image hash?
A cryptographic hash such as SHA-256 is a fixed-length fingerprint of a file's exact bytes. The same bytes always give the same hash; change a single byte and the hash changes completely. Comparing hashes tells you whether two files are bit-for-bit identical.
How do I check a file against a hash I was given?
Add the file, then paste the expected hash. The tool recognises hexadecimal and Base64, sha256sum lines and values such as sha256-…, works out the algorithm from the length, and shows Match or No match for each file.
Why did the hash change when the picture looks the same?
Because the bytes changed. Re-saving, converting, compressing or removing metadata produces new bytes even when the image looks identical, so the cryptographic hash is different. To find pictures that look alike, use the Duplicate Image Finder, which uses a perceptual hash instead.
Does renaming a file change its hash?
No. The name is not part of the file's contents, so a renamed copy has the same hash. The same is true for copies in different folders.
Which algorithm should I use?
SHA-256, which is always computed. SHA-512 is available when a source publishes it. SHA-1 is offered only to compare with older lists: it is no longer considered secure against deliberate tampering. MD5 is not offered.
Are my files uploaded?
No. Hashes are computed in your browser with its built-in Web Crypto API. Files, names and hashes are not sent anywhere, including analytics.