About this SHA-256 generator
SHA-256 is part of the SHA-2 family and produces a 256-bit hash, written as 64 hexadecimal characters. It is the standard choice for checksums of software downloads, for Git and blockchain data, for API request signatures, and anywhere a hash must hold up against tampering. Hash text or a whole file here and paste the checksum a publisher lists in Expected hash to confirm that your copy is identical. Hashing uses your browser’s built-in Web Crypto implementation, so nothing is sent anywhere.
How to generate a SHA-256 hash
- Add text or a file. Type or paste text, press an example, or press Hash a file to hash a download or document byte for byte.
- Pick the format. Lowercase hex is standard; choose uppercase hex or Base64 if needed. Paste the published checksum into Expected hash to compare.
- Press Generate SHA-256 hash. The hash appears below, with a match or no-match message when you pasted an expected hash.
- Copy the hash. Press Copy hash, or copy it in another format from the list.
Frequently asked questions
How do I verify a downloaded file?
Press Hash a file and choose the download, paste the SHA-256 checksum from the publisher’s website into Expected hash, and press Generate SHA-256 hash. "Match" means the file is exactly what was published.
Why does my hash differ from another tool?
Every byte counts. Text is hashed as UTF-8 with LF line breaks, including spaces and any final line break, so an extra space or a Windows line break elsewhere gives a different hash. Files are hashed byte for byte.
Can I use SHA-256 to store passwords?
Not on its own. SHA-256 is fast, which makes guessing passwords fast too. Store passwords with bcrypt or Argon2, which are deliberately slow and salted.
How long is a SHA-256 hash?
Always 256 bits: 64 hexadecimal characters or 44 Base64 characters, whether the input is one letter or a large file.
Is my file uploaded?
No. The file is read and hashed inside your browser and never reaches our server.