Generate a SHA-256 hash of any text, pre-selected.
This tool runs entirely as JavaScript in your browser. The text you hash — including if you’re hashing a password or a secret key is never transmitted over the network to this site's server or any third party, and is never written to a cookie, to browser storage, or to any log — there is nothing on our end to breach, subpoena, or accidentally leak, because it was never received in the first place. Closing or refreshing this tab clears it completely.
This describes only what this specific tool does with what you type into it. It doesn't cover the rest of this site — see the Privacy Policy for how analytics and advertising cookies are handled elsewhere.
A cryptographic hash function takes any input and produces a fixed-length string that changes completely if even one character of the input changes. This tool uses your browser’s built-in Web Crypto API to compute SHA-1, SHA-256, or SHA-512 hashes of text, entirely client-side.
Common uses include verifying a file or string was not altered (by comparing hashes), generating a short fixed-length fingerprint of a longer value, or producing test data for systems that store hashed values. SHA-256 is the most widely used general-purpose choice today; SHA-1 is considered weak for security purposes and is included mainly for compatibility with legacy systems.
This tool intentionally does not offer MD5, which is broken for security-sensitive use and easy to generate collisions for — if you need MD5 specifically for compatibility with an old system, a dedicated library is a better fit than a general web tool.
SHA-256 is the standard general-purpose choice today. SHA-1 is outdated for security purposes; SHA-512 gives a longer, marginally slower hash for cases needing extra collision resistance.
No. Hashing is one-way by design — there is no way to recover the input from the hash alone.
MD5 has known practical collision vulnerabilities and should not be used for anything security-sensitive. This tool sticks to the SHA family.