Hash Generator
Turn text into a SHA-2 hash using the Web Crypto API. The digest is shown as lowercase hexadecimal.
How to use
- Paste or type the text you want to hash.
- Choose SHA-256, SHA-384 or SHA-512.
- Copy the lowercase hex digest. The same input always produces the same hash.
How it works
A cryptographic hash maps arbitrary input to a fixed-length digest. The same text always produces the same hash; a small change produces a different one. This page supports SHA-256, SHA-384 and SHA-512 through crypto.subtle.digest.
Hashing is not encryption: you cannot get the original text back from the digest, but that also means a hash is not a way to hide a message you later need to read.
These algorithms are not a recommended way to store account passwords — use a password-hashing function such as Argon2 or bcrypt for that. A fast SHA-256 of a password is still easy to attack at scale. MD5 is not offered here.
Formula
digest = SHA-256 | SHA-384 | SHA-512 of UTF-8 bytes output = lowercase hexadecimal
Worked examples
Empty SHA-256
(empty string) → e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA-256 of abc
abc → ba7816bf8f01cfea414140de5dae2223b00361a396177a9cb410ff61f20015ad
SHA-512 of abc
abc → ddaf35a193617abacc417349ae20413112e6fa4e89a97ea20a9eeee64b55d39a2192992a274fc1a836ba3c23a3feebbd454d4423643ce80e2a9ac94fa54ca49f
Useful notes
- Hashing is not encryption.
- Never store account passwords as raw SHA-256, SHA-384 or SHA-512. Use a dedicated password-hashing function.
- The text is not uploaded.
FAQ
- Is hashing the same as encryption?
No. Encryption is designed to be reversed with a key. A hash is a one-way digest. Do not treat a SHA-256 string as a hidden message.
- Can I use this to store passwords?
No. Fast SHA-2 hashes are a poor password store. Use a dedicated password-hashing function such as Argon2 or bcrypt, with a unique salt, on the server.
- Which algorithms are available?
SHA-256, SHA-384 and SHA-512. MD5 and SHA-1 are not offered.
- Do you support MD5?
No. MD5 is a legacy, insecure digest and is not offered here.
- Is my text uploaded?
No. Hashing runs in your browser and the input is not sent to analytics.
Related tools
Password Generator
Create a strong random password in your browser. No signup, and the password is never stored or sent to analytics.
Base64 Encoder / Decoder
Encode and decode Base64 in your browser with proper UTF-8 support, including Unicode and emoji.
UUID Generator
Generate one or many RFC 4122 UUID v4 values in your browser. Copy or download as TXT.
See all Utilities tools.