🔒 Privacy: everything runs in your browser. Nothing is uploaded.
About this sha-256 hash generator
A cryptographic hash turns any input into a fixed-length fingerprint. Change a single character and the hash changes completely. SHA-256 is the most widely used hash today: software publishers list it next to downloads so you can verify the file was not corrupted or tampered with, developers use it for cache keys and content addressing, and it underpins TLS certificates and Git’s newer object format.
This generator uses the browser’s built-in WebCrypto API to compute SHA-1, SHA-256, SHA-384 and SHA-512 for text you type or a file you choose. Files are read locally and never uploaded, so it is safe to hash large or private files. MD5 is intentionally not offered because WebCrypto does not include it and it is no longer considered secure.
To verify a download, copy the SHA-256 checksum from the publisher’s official website, ideally over HTTPS from a page separate from the download mirror, then hash the file you received and compare the two values character by character. Any difference means the file is incomplete, corrupted or not the file the publisher intended. On the command line, the same check is sha256sum file on Linux, shasum -a 256 file on macOS and Get-FileHash in Windows PowerShell; this page gives you the same answer without opening a terminal, which is convenient on locked-down or shared computers.
How to use it
- Type or paste text to hash it as UTF-8; the result updates live.
- Or click Hash a file and pick a file to verify a download.
- Compare the SHA-256 value with the one published by the software vendor.
FAQ
Can a SHA-256 hash be reversed?
No. Hashes are one-way. Short or common inputs can be guessed by brute force, which is why passwords need salted slow hashes like bcrypt or Argon2, not plain SHA-256.
Why do I get a different hash than another tool?
Check for trailing spaces or line breaks and make sure both tools use UTF-8.
Is SHA-1 safe?
SHA-1 is broken for collision resistance; use SHA-256 or stronger for security purposes.
Are files uploaded?
No, hashing happens entirely in your browser.