Hash Generator (SHA-256)
Compute SHA-256, SHA-1, SHA-384, and SHA-512 hashes of any text. Everything runs locally in your browser via the Web Crypto API — nothing is uploaded.
Privacy & Algorithm Notes
All hashing happens locally in your browser using the Web Crypto API (crypto.subtle.digest). Your text is never sent to any server.
SHA-1 is cryptographically broken — practical collision attacks have existed since 2017 — so never use it for signatures, certificates, or password storage. It is included here only for legacy checksums.
There is no MD5 option because the Web Crypto API does not provide MD5 (it has been broken for decades), and this tool only offers algorithms the browser implements natively.
Frequently Asked Questions
- Is my text uploaded to a server?
- No. Every hash is computed locally in your browser using the built-in Web Crypto API (crypto.subtle.digest). Your text never leaves your device — you can even disconnect from the internet after the page loads and the tool keeps working.
- What is a cryptographic hash?
- A cryptographic hash function turns any input into a fixed-length fingerprint: the same input always produces the same hash, but even a one-character change produces a completely different one, and the original text cannot be recovered from the hash. Hashes are used to verify file integrity, store passwords, and sign data.
- Which hash algorithm should I use?
- SHA-256 is the standard modern choice and what most systems expect. SHA-384 and SHA-512 offer longer digests from the same SHA-2 family. Use SHA-1 only when a legacy system specifically requires it.
- Is SHA-1 safe to use?
- Not for security. Practical collision attacks against SHA-1 have existed since 2017, so it must not be used for signatures, certificates, or password storage. It is offered here only for legacy checksums and compatibility with older systems that still expect SHA-1 digests.
- Why is there no MD5 option?
- The Web Crypto API deliberately does not implement MD5 because it has been cryptographically broken for decades, and this tool only ships algorithms the browser provides natively. If a legacy system demands MD5, you will need a dedicated (non-browser) utility.
- Can I get the hash in uppercase?
- Yes. Hashes are shown as lowercase hexadecimal by default, which is the common convention, but the uppercase toggle switches every digest to uppercase hex. Both forms represent exactly the same bytes.