SHA-256 Hash Generator
Compute SHA-256, SHA-1, and SHA-512 hashes of any text in your browser with the Web Crypto API. Nothing is uploaded.
Private by construction. The conversion happens in this page's JavaScript. Nothing you paste here leaves your machine, and the tool keeps working with the network unplugged.
Computes SHA-256, SHA-1, and SHA-512 digests of your text using the Web Crypto API — the browser's built-in, audited hash implementation, not a JavaScript re-implementation. Input is UTF-8 encoded before hashing, so the digests match what sha256sum produces for the same bytes on any platform. Because hashing runs locally, this is safe for text you would never paste into an online tool: the input never leaves your machine.
Questions this tool gets asked
Do these hashes match sha256sum on Linux?
Yes, for the same bytes. The text is UTF-8 encoded before hashing, which is what shell tools see when hashing a UTF-8 file. Note that a trailing newline in a file changes the hash; this tool hashes exactly what you type.
Why no MD5?
The Web Crypto API deliberately excludes MD5 because it is cryptographically broken. Shipping a JavaScript MD5 here would mean recommending a hash no one should use for anything security-relevant.
Is SHA-1 not broken too?
For collision resistance, yes, and it should not be used for signatures or certificates. It remains in the tool because legacy systems (git object names, some checksums) still need it for interoperability.