Text or a file
A bare hex digest, a line copied from a checksum file, or a Subresource
Integrity string like sha384-…. You do not have to know which algorithm it came from.
Digests
Worked out in this browser — nothing is uploaded and nothing is stored. MD5 and SHA-1 are shown because download pages still publish them, and both are marked not for security: a collision can be manufactured for either, so a matching digest does not prove a file was not tampered with. They are still perfectly good at noticing a half-finished download.
The Hash & Checksum Generator needs JavaScript: the digests are computed in this browser, which is why nothing you type or open has to be sent anywhere. With JavaScript switched off there is nothing to do the work.