SHA-256 Hash Generator
Hash a piece of text or a file and compare the result with the checksum a website gave you. Your text and files are processed by your browser only — nothing is uploaded.
Algorithm
Hashed by your browser with the Web Crypto API (crypto.subtle). The text and files you choose are never uploaded, saved or logged.
How it works
- Choose Text or File, then type your text or pick the file from your device.
- Pick the algorithm: SHA-256 (the usual one), SHA-1, SHA-384 or SHA-512.
- Copy the hash in hex or Base64.
- Paste the checksum you expect into “Expected hash” to see whether it matches.
What people use it for
Verify a download
Compare the SHA-256 of an installer or ISO with the value published by its author before you run it.
Check that two files are identical
Hash both files: if the hashes match, the contents are the same, byte for byte.
Fingerprint a string
Get a fixed-length fingerprint of a token, a config value or a test fixture for logs and unit tests.
Questions
- Is my file uploaded?
- No. The file is read by your browser and hashed on your device with the Web Crypto API. Nothing is sent, stored or logged, and the page keeps working offline once it has loaded.
- How big can a file be?
- Up to 200 MB. The browser has to read the whole file into memory to hash it, so larger files are refused with a message instead of freezing your tab. For bigger files, use the sha256sum command on your computer.
- How does the comparison work?
- Hex hashes are compared ignoring upper or lower case, spaces, line breaks, colons and a leading 0x. A Base64 hash must match exactly. A match means the content is identical; any difference, even one byte, gives a completely different hash.
- Which algorithm should I use?
- SHA-256 is the standard choice for checksums and integrity. SHA-1 is broken for security uses (collisions exist) and is offered only to check old checksums. Hashes are one-way and are not suited to storing passwords on their own.