Use SHA-256 for file integrity verification (checksum published alongside a download). Use SHA-512 when you need longer output for key derivation. Don't use MD5 or SHA-1 for security-critical applications — they're cryptographically broken. They're fine for non-security use cases like cache keys or short fingerprints.
Last updated: 2026-04-22