—
—
—
—
A hash function converts any input text into a fixed-length string of characters. The same input always produces the same output, but it is computationally infeasible to reverse the process.
SHA-256 produces a 256-bit (64 hex character) digest and SHA-512 produces a 512-bit (128 hex character) digest. Both are considered secure — SHA-512 offers slightly larger output.
Yes. Hash the file content (paste as text) and compare it with a published hash to verify the file has not been tampered with.
SHA-1 is considered cryptographically broken and should not be used for security-critical applications. Use SHA-256 or SHA-512 instead.
Hashing is a one-way function — you cannot recover the original input from a hash. Encryption is reversible using a key. Hashes are used for integrity verification and password storage; encryption is used for protecting data in transit or at rest.
SHA-256 is used in TLS/HTTPS certificates, Git commit IDs, Bitcoin proof-of-work, code signing, and digital signatures. It is the backbone of modern internet security.
SHA-256 alone is not recommended for password storage because it is too fast — attackers can compute billions of hashes per second. Use bcrypt, scrypt, or Argon2 instead, which are specifically designed to be slow for password hashing.
A cryptographic hash function creates a unique fixed-length fingerprint of any input. SHA-256 is the backbone of Bitcoin, TLS certificates, Git, and most digital signature systems. Use this tool to generate and verify hashes instantly without any server involvement.
Paste your input text
Type or paste any text into the input field. The hash is computed instantly as you type — you'll see all four hash variants (SHA-1, SHA-256, SHA-384, SHA-512) update in real time.
Select the algorithm you need
SHA-256 is the standard for most use cases. SHA-512 is preferred for high-security applications. SHA-1 is provided for legacy compatibility only — avoid it for new projects.
Copy the hash
Click the copy icon next to the hash you need. The entire hex string is copied, ready to paste into your verification tool, code, or documentation.
Verify integrity by comparing hashes
Paste two pieces of text or file contents to compare their hashes. If the hashes match character-for-character, the inputs are identical.
Verify software downloads
Before running a downloaded installer or package, hash its contents and compare with the SHA-256 checksum published on the official download page. Any difference means the file was tampered with or corrupted.
Store passwords securely
Never store plaintext passwords. Use SHA-256 (combined with a salt) or bcrypt to convert passwords into hashes. Only the hash is stored — the original password can never be recovered from it.
Detect data changes
Hash a document, config file, or API response. Later, rehash the same data and compare. If the hash differs, something changed — useful for change detection in auditing and monitoring systems.
A cryptographic hash function takes an input of any length and produces a fixed-size output (the hash or digest) that is deterministic, fast to compute, and practically impossible to reverse. SHA-256 produces a 256-bit (64 hex character) digest; SHA-512 doubles that to 512 bits. Even a single character change in the input produces a completely different hash — a property called the avalanche effect.
Common use cases include verifying file integrity after a download, storing a fingerprint of a document or message, constructing HMAC signatures for API authentication, and deriving unique identifiers from structured data. All hashing runs directly in your browser using the Web Crypto API (crypto.subtle.digest) — the same cryptographic primitives your browser uses for HTTPS. Your input is never transmitted to any server.