Last updated:

Answer: file hashes

What is a file hash?A short fingerprint of a file’s exact contents; it shows sameness, not time or author

TimeBinder adds a layer of protection against AI and human fraud and disputes.

The file stays on your device. Your browser makes a digital fingerprint of the file. TimeBinder records the fingerprint and the time, not the file.

Short answer

A file hash is a short, fixed-length fingerprint calculated from a file’s exact bytes. The same file always gives the same hash, and any change gives a different one. A hash alone does not show when the file was made, who made it, or whether its contents are true.

How a hash works

A hash function reads every byte of a file and produces a short string of letters and numbers. SHA-256, the one TimeBinder uses, always gives 64 hexadecimal characters, whether the file is a text note or a feature film. Three properties matter. The same file always gives the same hash. Changing even one byte gives a completely different hash. And the process is one-way, so you cannot rebuild the file from its hash.

That makes a hash useful for checking that a download is intact, that two copies are identical, or that a file has not changed since you last hashed it. You can see this yourself with our bulk SHA-256 hash manifest tool, which hashes files in your browser without uploading them, or compare two files with the file comparison checker.

A hash says nothing about when the file was created, who made it, or whether its contents are accurate. It also only matches the exact bytes: re-saving a photo or exporting a document again usually produces a different hash even if it looks the same. Older algorithms such as MD5 and SHA-1 are no longer considered safe against deliberate collisions; see MD5 and SHA-1.

Adding a time to a hash

A hash on its own has no date. To show when a file existed, the hash has to be recorded somewhere that carries a trustworthy time. TimeBinder makes the SHA-256 fingerprint in your browser, so the file is not uploaded, and anchors the record to Bitcoin. That shows the exact file existed no later than the recorded time and still matches.

It does not show authorship, ownership or that the contents are true. For the full picture, see what is blockchain timestamping?

Make a TimeBind: first one free →

First Pooled TimeBind free, no card, then from US$5. An ASAP TimeBind is US$15.

Frequently asked questions

How long is a SHA-256 hash?

A SHA-256 hash is 256 bits, shown as 64 hexadecimal characters, whatever the size of the file.

Can you get the file back from its hash?

No. A hash is one-way. It lets you check a file you already have, not rebuild one.

Is a file hash the same as a checksum?

A checksum is a similar idea used mainly to catch accidental errors. A cryptographic hash such as SHA-256 is designed to resist deliberate tampering as well.

Does a hash prove who made a file or when?

No. A hash only identifies exact contents. A time needs a separate record, such as a timestamp, and neither shows authorship.

Sources

Record a fingerprint of the file you rely on

Add a layer of protection against AI and human fraud and disputes: a dated, checkable record of the exact file you hold.

  1. Open the app and sign in with email or Google.
  2. Add your files. They stay on your computer.
  3. Seal them and download your Proof of Time certificates.
Open TimeBinder →

First Pooled TimeBind free, no card, then from US$5. See pricing.

Related glossary entries: avalanche effect and forensic image.