Developer Tool
SHA Hash Generator
Compute SHA-256, SHA-384, SHA-512 and SHA-1 hashes of text.
Runs in your browser — nothing is uploaded
- SHA-256
- …
- SHA-384
- …
- SHA-512
- …
- SHA-1not safe for security use
- …
What this does
A cryptographic hash turns any input into a fixed-length fingerprint. The same input always produces the same hash, and changing even one character produces a completely different one, which is why hashes are used to check that a downloaded file is intact or that two pieces of data are identical.
This tool uses the Web Crypto API built into your browser, so the hashes come from a standard, audited implementation rather than a script written for this page.
How to use it
- Type or paste text. The text is converted to UTF-8 bytes before hashing.
- Read the hashes for each algorithm, shown in hexadecimal, and copy the one you need.
Where it stops being right
- MD5 is not offered: browsers' Web Crypto API does not include it, and it is broken for security purposes.
- SHA-1 is included only for compatibility with older systems. Practical collisions have been demonstrated, so do not use it to protect anything.
- A plain hash is not a safe way to store passwords. Password storage needs a slow, salted algorithm such as bcrypt, scrypt or Argon2.
Questions
- Can a hash be reversed to get the original text?
- Not directly — hashing is one-way. Short or common inputs can still be found by guessing, which is why passwords need salted, deliberately slow hashing instead.
- Why does my hash differ from another tool's?
- Usually because of invisible differences in the input: a trailing newline, a different line ending, or a different text encoding.
- Which algorithm should I use?
- SHA-256 is the common default for integrity checks. Use whatever the system you are matching against expects.
More developer tools
- JWT DecoderRead the header and payload of a JSON Web Token, with its dates shown in plain language.
- JSON Formatter & ValidatorPretty-print, minify and check JSON, with the position of any syntax error.
- Base64 Encoder & DecoderConvert text to Base64 and back, with correct handling of non-English characters.
- URL Encoder & DecoderPercent-encode text for use in a URL, or decode an encoded URL back into readable text.