SHA-256 hash generator

Compute SHA-256 of text or any file in your browser. Add a secret key for HMAC-SHA256, the signature used by most webhooks and APIs.

Free and private. Everything runs in your browser, nothing is uploaded.

How it works

  1. Enter text or choose a fileThe hash appears at the top as you type.
  2. Copy the valueCopy it with one click, in lowercase or uppercase.
  3. Compare if neededPaste an expected value to check it.

The standard hash today

SHA-256 is part of the SHA-2 family and produces a 256 bit value, 64 hexadecimal characters. It is used for software checksums, Git and Docker content addresses, Bitcoin, TLS certificates and the HMAC signatures of webhooks from payment providers, version control platforms and messaging services.

To verify a webhook, turn on HMAC, paste the signing secret from your dashboard and the exact raw request body, then compare the result with the signature header. Everything stays in your browser, which matters when the secret is a production key.

Files and large data

Choose File to hash an installer or an archive and compare it with the checksum published by the vendor. The calculation uses the native crypto engine of your browser and is fast even for big files.

Frequently asked questions

Is SHA-256 secure?

Yes. No practical attacks are known, and it is the recommended general purpose hash.

Are my files uploaded?

No. Files are read and hashed in your browser.

Should I use MD5 for passwords?

No. MD5 and SHA-1 are broken for security purposes. Use them only for checksums. Passwords need slow hashes like Argon2 or bcrypt.

Why does my hash differ from another tool?

Usually because of a trailing newline or a different text encoding. This tool hashes exactly what is in the box, as UTF-8.

How large can files be?

Several hundred megabytes work on most devices; the limit is the memory of your browser.