Skip to content
gohacks.dev
Security

SHA Hash Generator

Compute SHA-1, SHA-256, SHA-384 and SHA-512 digests of any text, in hex, using the browser's Web Crypto API.

Free · No sign-up · Your inputs stay in your browser

Input

Hash text with SHA

Output

Digests (hex)

SHA-1

…

SHA-256

…

SHA-384

…

SHA-512

…

Use these to check a download or compare two values. Never store passwords as a plain SHA digest: use bcrypt or Argon2, which PHP's password_hash() gives you.

Runs in this browser. Nothing you paste is sent to a server.

Matching another tool's output

A digest changes completely if one byte changes. When this tool and sha256sum disagree, the cause is almost always a trailing newline: echo "text" | sha256sum hashes the newline too, while printf "text" | sha256sum does not.

Not for passwords

SHA-256 is designed to be fast, which is exactly wrong for passwords: an attacker can try billions of guesses a second. Store passwords with a slow, salted algorithm such as bcrypt or Argon2id. In PHP that is password_hash(), and in Laravel the Hash facade.

Why no MD5?

Web Crypto does not offer MD5, and it should not be used for anything security-related; collisions can be produced on a laptop.

Share

Frequently asked questions

Can a SHA-256 hash be reversed?
Not directly. But short or common inputs can be found by guessing, which is why hashes of passwords or phone numbers are not anonymous.
Is SHA-1 still safe?
Not where collisions matter, such as signatures and certificates. It is still fine as a checksum for accidental corruption.
Is what I paste sent anywhere?
No. The tool runs entirely in your browser with JavaScript. Nothing you type or paste is sent to our server or stored.

Keep planning

Similar tools