SHA256 Hash Generator

SHA-256 is a strong, modern hash. It is a good choice for checking that files and text are unchanged. For storing passwords, use a slow password hashing method such as bcrypt, scrypt or Argon2 instead, because plain SHA-256 is too fast to be safe for that.

Check a checksum (optional)

Each result below will show whether it matches.

Hash some text

Your SHA-256 hash will appear here

Hash a file

Everything is calculated in your browser. Your text and files are never uploaded or stored.

How to generate a SHA-256 hash

  1. To hash text, type or paste it into the box. The SHA-256 hash appears as you type.
  2. To hash a file, click the file box or drag files onto it. The hash shows when the file has been read.
  3. Click Copy to copy a hash.
  4. To check a file or text against a hash you were given, paste that hash into the checksum box. Each result shows whether it matches.

What is SHA-256?

SHA-256 is a cryptographic hash function from the SHA-2 family. It turns any amount of data into a fixed fingerprint of 64 hexadecimal characters. The same input always gives the same hash, and even a tiny change gives a completely different one. No practical way is known to find two different inputs with the same SHA-256 hash, or to work backwards from a hash to the original data. For example, the SHA-256 hash of the word hello is 2cf24dba5fb0a30e26e83b2ac5b9e29e1b161e5c1fa7425e73043362938b9824.

What is SHA-256 used for?

  • Verifying downloads: software and operating system images often come with a SHA-256 checksum so you can confirm a file is complete and has not been altered.
  • Digital signatures and certificates: SHA-256 is widely used inside website security certificates and signed documents.
  • Data integrity: detecting whether a file or record has changed, and finding duplicate files.
  • Building blocks of other systems: SHA-256 is part of many protocols and, famously, Bitcoin.

SHA-256 versus MD5

SHA-256 gives a longer, 64-character hash and is still considered secure, while MD5 gives a 32-character hash and is broken for security purposes. If a website offers both for a download, prefer SHA-256. MD5 is still handy for quick checks with older systems, which you can do with our MD5 Hash Generator.

Is it safe and private?

Yes. Hashes are calculated entirely in your web browser on your own device. Your text and files are never uploaded to a server or stored anywhere, and files are read in small pieces so even large files can be checked. This tool needs no outside libraries.

Good to know

  • A hash is a one-way fingerprint, not encryption. You cannot turn it back into the original data, and it does not hide anything.
  • Text is converted to UTF-8 before hashing, which matches most tools and programming languages. Different line endings or extra spaces give a different hash, so copy text exactly.
  • For passwords, do not use plain SHA-256. Use bcrypt, scrypt or Argon2, which are designed to be slow and to resist guessing.
  • With “Hash each line separately”, empty lines are skipped, and each result is shown next to its line.
  • The checksum box accepts hexadecimal in upper or lower case, and Base64.
  • You can hash up to 20 files at a time, each up to 2 GB. Large files take a little while, and a progress bar shows how far along they are.

Need to encode data instead? Try our Base64 Encoder/Decoder.

Scroll to Top