Is SHA-256 encryption?

No. Encryption is reversible with a key; hashing is one-way. There's no key and no way to get the original text back from a SHA-256 hash.

Can I use this to hash passwords?

Not on its own. SHA-256 is designed to be fast, which helps attackers guess passwords. Store passwords with a slow, salted algorithm such as Argon2id, scrypt or bcrypt.

Why does my hash differ from another tool's?

Usually because of invisible differences: a trailing newline, Windows line endings, or a different text encoding. This tool hashes exactly what's in the box, as UTF-8.

Are my files uploaded?

No. Files are read and hashed in your browser. Very large files need enough free memory to load.

SHA-256 Hash Generator

Create SHA-256 hashes of text or files using your browser's built-in cryptography.

Processed locally

Hash

TextFile

Uppercase hex

Text (hashed as UTF-8)

SHA-256 · hex

—

Base64

—

Compare with an expected hash (optional)

A hash is not encryption. SHA-256 is a one-way fingerprint: you can't turn it back into the original, and there's no key. Use it to check that files or text haven't changed. Don't use plain SHA-256 to store passwords; use a slow password hash like Argon2 or bcrypt instead.

Instructions

How to use it

01Choose Text or File.
02Type text (the hash updates as you type) or drop a file.
03Copy the hash in hex or Base64.
04To verify a download, paste the publisher's checksum into Compare.

About

What it does

SHA-256 turns any input, from a single word to a multi-gigabyte file, into a fixed 64-character fingerprint. Change one letter and the fingerprint changes completely. It's used to verify downloads, detect changed files, sign data and build things like Git and blockchains.

This generator uses your browser's built-in Web Crypto API, the same audited implementation your browser uses for secure connections. Text is hashed as UTF-8, so the result matches sha256sum, OpenSSL, Python and Node for the same input.

Settings explained

Uppercase hex: Hex digests are case-insensitive. Some systems display them in capitals; the value is the same.
Base64 output: The same 32-byte digest in a shorter encoding, used in Subresource Integrity (sha256-...) and some APIs.

Good for

Checking that a downloaded installer or ISO matches the published checksum
Generating Subresource Integrity hashes for scripts
Creating a fingerprint to detect whether a file has changed
Testing hash-based code against known values

Questions, answered

Is SHA-256 encryption?: No. Encryption is reversible with a key; hashing is one-way. There's no key and no way to get the original text back from a SHA-256 hash.
Can I use this to hash passwords?: Not on its own. SHA-256 is designed to be fast, which helps attackers guess passwords. Store passwords with a slow, salted algorithm such as Argon2id, scrypt or bcrypt.
Why does my hash differ from another tool's?: Usually because of invisible differences: a trailing newline, Windows line endings, or a different text encoding. This tool hashes exactly what's in the box, as UTF-8.
Are my files uploaded?: No. Files are read and hashed in your browser. Very large files need enough free memory to load.

All developer tools (5)