About the Whirlpool Hash Generator
Whirlpool is a 512-bit cryptographic hash function designed by Vincent Rijmen, co-creator of AES, and Paulo Barreto. It is part of the ISO/IEC 10118-3 standard and is used by some file-sharing tools, password hashing schemes and disk encryption software such as VeraCrypt. This generator computes the Whirlpool hash of any text as you type, or of a file you choose, and shows it as 128 hexadecimal characters. You can paste an expected checksum to check that a download is intact. Everything is calculated in your browser.
Updated October 2026
How to use the Whirlpool Hash Generator
- 1Choose Text or File.
- 2Type or paste text, or choose a file.
- 3Read the 128-character Whirlpool hash.
- 4Tick Capital letters if your checksum uses them.
- 5Paste an expected hash to compare.
Where Whirlpool is used
Whirlpool appears in VeraCrypt and TrueCrypt as one of the hash options for key derivation, in some PHP and database applications through their hash functions, and on download sites that publish several checksums for each file. Because its design is based on the same ideas as AES, it attracted a lot of study and has held up well.
Checking a download
Copy the Whirlpool checksum from the website, choose File here, pick the downloaded file and paste the checksum into the compare box. A match means the file is exactly what the publisher released; a mismatch means it was damaged or changed, so download it again from the official source.
Whirlpool versions
There are three versions of Whirlpool. The original Whirlpool-0 and the 2001 Whirlpool-T used different S-boxes; the final 2003 version fixed a weakness in the diffusion matrix and is the one in ISO/IEC 10118-3 and in this tool. If a tool gives a different value for the same text, it may implement an earlier version.
- Empty text: 19fa61d7…42a66eb3
- abc: 4e2448a4…76d4eef5
- Output size: 512 bits
Text encoding matters
The text is converted to UTF-8 bytes before hashing, which is the standard on the web and in most programming languages. A trailing newline or a Windows line ending changes the hash completely, so copy text carefully when you compare.
Hashes alone don't protect passwords
A plain Whirlpool hash is too fast to protect stored passwords on its own, because attackers can test billions of guesses. Password systems wrap a hash in a slow scheme with a salt, such as PBKDF2, bcrypt, scrypt or Argon2. Use this tool for checksums, fingerprints and learning, and use a password hashing scheme for logins.
Phone and computer
Hash text or files on any device. The hash wraps onto several lines on narrow screens; Copy hash always copies the full value. Whirlpool gives a long digest, and other hashes have other uses. Compare it with the RIPEMD Hash Generator, the SHA-512 Hash Generator for a common long hash, and the Hash Generator for several at once.
Features
- Whirlpool (final ISO version)
- Text or any file
- Updates as you type
- Upper or lower case output
- Checksum comparison
- Nothing is uploaded
Frequently asked questions
What is the Whirlpool hash of an empty string?
19fa61d75522a466…42a66eb3 (128 hex characters in total). The tool shows the full value if you leave the box empty.
How long is a Whirlpool hash?
512 bits, which is 64 bytes or 128 hexadecimal characters.
Is Whirlpool secure?
No practical attacks on the full Whirlpool are known, and it is still considered secure. SHA-256 and SHA-3 are more widely supported, so pick those for new projects unless you need Whirlpool.
Why doesn't my result match another tool?
Check that both use the same text, including spaces and line endings, and the same encoding (UTF-8). Very old tools may use Whirlpool-0 or Whirlpool-T, earlier versions that give different hashes.
Can I hash large files?
Yes, though Whirlpool is slower than MD5 or SHA-256 in a browser. Files of tens of megabytes take a few seconds.
Can a hash be reversed?
No. A hash is a fingerprint, not encryption. You can only check whether some data gives the same hash.