Skip to content

SHA-256 Hash Generator

Hash text or a local file with SHA-256 entirely in your browser. Copy the digest as lowercase hex, uppercase hex, or base64.

Type or choose a file to see its hash.

The SHA-256 hash appears right below as you type. You can also hash a local file, and it never leaves your browser.

No file selected
SHA-256 hash

SHA-256 hashing turns any input into a fixed string of 64 hex characters, and this generator runs entirely in your browser. Type or drop text in, or hash a local file, and the digest never leaves your device.

The exact output

Type hello and the tool returns 2cf24dba5fb0a30e26e83b2ac5b9e29e1b161e5c1fa7425e73043362938b9824. The same input always gives the same hash, and even one changed character produces a completely different one. You can switch the format between lowercase hex, uppercase hex, and base64 using the Format selector beneath the result.

Input Output (lowercase hex)
hello 2cf24dba5fb0a30e26e83b2ac5b9e29e1b161e5c1fa7425e73043362938b9824
password 5e884898da28047151d0e56f8dc6292773603d0d6aabbdd62a11ef721d1542d8
(empty) e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

The three rows above are all reproducible: paste each value into the tool and hit nothing, because the digest updates live as you type.

How to hash

  1. Type or paste text into the top box, or click Hash a file and pick a local file.
  2. Read the digest in the SHA-256 hash area directly below.
  3. Pick a format, then copy with the icon next to the output.

Hashing a file

After you choose a file, its name and size appear beside the button, and the tool hashes the complete contents. That is how you check a downloaded program against the SHA-256 checksum a developer published, confident the bytes match before you run them.

What SHA-256 is not

The hash is one-way, so you cannot recover the original text from a digest. It also is not a password: a short password guesses quickly, which is why the same hash for “password” appears in any rainbow-table list. Treat it as an integrity check, not encryption.