SHA-256 hash

The SHA-256 digest of any text as you type, with SHA-1, SHA-384 and SHA-512 beside it.

Free, no sign-up.

SHA-256 hash

What a hash tells you

A SHA-256 hash is a 64-character fingerprint of the exact bytes you give it. Change one character, or add a line break at the end, and the hash is completely different: "abc" and "abc" followed by a new line share nothing. Even empty text has a hash, starting e3b0c442. This page hashes your text as UTF-8.

SHA-1 is shown for older systems, but it's no longer safe where someone might forge a match: researchers produced two different PDFs with the same SHA-1 in 2017. SHA-256 and SHA-512 have no such weakness known.

Checking a download

To check that a file you downloaded is the one the publisher released, hash the file and compare it with the checksum on their site. On a Mac, run shasum -a 256 followed by the file name in Terminal; on Linux, sha256sum; on Windows, certutil -hashfile followed by the file name and SHA256. Every character must match. This page hashes text only, not files.

More developer tools

Hash text with SHA-256 to compare values, check a checksum someone gave you, or make test data. The text is encoded as UTF-8 and hashed by your browser’s built-in crypto, so it never leaves the page.

How it works

  • Paste the text — Spaces and line breaks count.
  • Read the digests — SHA-256, SHA-1, SHA-384 and SHA-512 appear as lowercase hex as you type.
  • Copy it — Use the Copy button beside it.

Examples

  • abc — ba7816bf8f01cfea414140de5dae2223b00361a396177a9cb410ff61f20015ad

FAQ

  • Can a hash be reversed? — No. But short or common text can be guessed, so a plain hash is no way to store passwords.
  • Can I hash a file? — Not yet; paste the text you want to hash.
  • What about MD5? — Browsers don’t compute MD5, and it’s broken for anything security-related; SHA-256 is the usual choice.
  • Is my text stored? — No. It runs in your browser; what you paste is never sent anywhere.