About the SHA-256 Hash Generator
This tool calculates the SHA-256 hash of text or of a file. A hash is a fixed-length fingerprint of data: the same input always gives the same 256-bit value, written as 64 hexadecimal characters, and even a one-letter change gives a completely different result. Type or paste text and the SHA-256 hash updates as you type, or choose a file and its hash is worked out on your device. You can copy the result, show it in capital letters, or paste a checksum you were given to see at once whether it matches. Nothing is uploaded.
Updated October 2026
How to use the SHA-256 Hash Generator
- 1Choose Text or File.
- 2Type or paste the text, or pick the file.
- 3Read the SHA-256 hash that appears below.
- 4Tick Capital letters if you need uppercase hexadecimal.
- 5Paste a published checksum into the compare box to see Match or Different, or press Copy hash.
What an SHA-256 hash is for
Most software downloads publish a SHA-256 checksum so that you can verify the file after downloading. It is also used in certificates, Bitcoin, Git's newer format and many APIs for request signing. Comparing your own result with the published one shows whether the file was changed or damaged.
The hash is not encryption. You cannot turn it back into the original data. Its job is to be a short, repeatable fingerprint, so you can compare two things without comparing every byte.
Reading the SHA-256 result
An SHA-256 value is 64 characters long and uses the digits 0 to 9 and the letters a to f. Capital letters mean the same thing as small ones, so a published checksum in capitals still matches when you compare. The compare box ignores capitals and spaces.
Hashing text is sensitive to every character. Text with a trailing line break hashes differently from the same text without one, and different text encodings give different results. This tool encodes text as UTF-8, the usual choice.
- SHA-256 of an empty input: e3b0c44298fc1c149afb…
- SHA-256 of the word hello: 2cf24dba5fb0a30e26e8…
Security and the SHA-256 hash
SHA-256 is part of the SHA-2 family and is considered secure for integrity checks, digital signatures and blockchain use. For storing passwords, however, use a slow, salted method such as bcrypt or scrypt instead of a plain hash.
If you need a hash for a password, use a purpose-built method such as bcrypt, scrypt or Argon2, which are deliberately slow and use a random salt. The Hash Generator on this site shows several algorithms side by side if you want to compare them.
Files, phone and computer
On a computer you can choose a file of any size your browser can read into memory, which is fine for installers and documents; very large files such as multi-gigabyte images may be better checked with a command-line tool. On a phone, use the File option to pick a photo or a PDF, and the hash is ready in a moment. The result can be copied and pasted into a message or a form. For a longer hash use the SHA-512 Hash Generator, and for older checks the MD5 Hash Generator is still used.
Features
- SHA-256 of text or files
- 64-character hexadecimal result
- Updates as you type
- Compare with a published checksum
- Copy with one tap
- Private: nothing is uploaded
Frequently asked questions
How do I generate an SHA-256 hash?
Type or paste your text, or choose a file, and the SHA-256 hash appears at once. For the text hello the SHA-256 hash is 2cf24dba5fb0a30e26e83b2ac5b9e29e1b161e5c1fa7425e73043362938b9824.
What is the SHA-256 hash of an empty string?
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855. It is the fingerprint of no data at all, and it is a handy value to recognise when a file turns out to be empty.
Is SHA-256 secure?
SHA-256 is part of the SHA-2 family and is considered secure for integrity checks, digital signatures and blockchain use. For storing passwords, however, use a slow, salted method such as bcrypt or scrypt instead of a plain hash.
How do I check a download with SHA-256?
Choose File, pick the downloaded file and wait for the hash. Paste the checksum from the download page into the compare box. If it says Match, your copy is identical to the original. If it says Different, download the file again.
Does the same text always give the same SHA-256 hash?
Yes. A hash function is deterministic. The text must be exactly the same, including spaces, capital letters and line breaks; one extra space changes the whole value.
Are my text and files uploaded to a server?
No. The SHA-256 is calculated inside your browser, so files and text never leave your device.