SHA-256 hash generator

Compute the SHA-256 hash of text or a file and compare it with a checksum.

Runs in your browser. Your input is not uploaded.

SHA-256
 

What it does

SHA-256 is part of the SHA-2 family and produces a 256-bit digest (64 hex characters). It is the default choice for file checksums, content addressing, signatures and certificates.

Hashing uses the browser’s Web Crypto API. Files are read locally and can be up to 512 MB.

How to use it

  1. Type text or choose a file.
  2. Choose hex, upper-case hex or Base64.
  3. Paste the published checksum into Compare to verify a download.

Example

Input
abc
Output
ba7816bf8f01cfea414140de5dae2223b00361a396177a9cb410ff61f20015ad

Things to watch for

  • A plain SHA-256 of a password is not safe storage. It is fast to guess. Use bcrypt.
  • A checksum only helps if you got it from a source you trust more than the download itself.

Questions

How do I check a file’s SHA-256 checksum?
Choose the file, paste the published checksum into Compare, and the tool says whether they match. On the command line: sha256sum file (macOS: shasum -a 256 file).
Is the file uploaded?
No. It is read and hashed in your browser. Files up to 512 MB are supported.
Why is my hash different from another tool’s?
Usually a trailing new line (echo adds one; use printf %s), a different character encoding, or Windows line endings. This tool hashes the exact UTF-8 bytes of the text.
Can a hash be reversed?
No. But short or common inputs can be found by guessing, which is why plain hashes are not suitable for passwords.