Hash generator (SHA)
SHA-1, SHA-256, SHA-384 and SHA-512, live.
- Instant
- Free
- Private (processed locally)
- No sign-up
What is a hash for?
A hash is a unique digital “signature” of some content. It is used to verify that a file or message has not been changed: if the content changes, the hash changes. It is fast, deterministic and irreversible.
How to use the generator
-
Enter your text
Type or paste the content to hash.
-
Read the hashes
SHA-1, SHA-256, SHA-384 and SHA-512 compute live.
-
Copy the value
Click a hash to copy it.
The SHA algorithms
| Algorithm | Size | Hex length | Recommendation |
|---|---|---|---|
| SHA-1 | 160 bits | 40 characters | Obsolete (avoid) |
| SHA-256 | 256 bits | 64 characters | Recommended standard |
| SHA-384 | 384 bits | 96 characters | High security |
| SHA-512 | 512 bits | 128 characters | High security |
Use cases
- File integrity: compare a download’s hash to the published one.
- Deduplication and data indexing.
- Digital signatures and certificates (building block).
Hashing alone is not suitable for storing passwords: use bcrypt, scrypt or Argon2 with a salt.
Frequently asked questions
What is a hash function?
A hash function turns data of any size into a fixed-size fingerprint. The same input always yields the same hash, but the slightest change radically alters the result.
Can the original text be recovered from a hash?
No. Hashing is a one-way operation: it is designed to be impossible to reverse. That is what makes it useful for verifying integrity without revealing the content.
Should I still use SHA-1?
No, for security. SHA-1 is considered obsolete because collisions have been demonstrated. Prefer SHA-256 or higher. SHA-1 is shown here for comparison or compatibility.
What is a hash used for day to day?
To check that a downloaded file has not been altered (checksum), to index data, or as a building block of digital signatures. To store passwords, dedicated algorithms (bcrypt, Argon2) with salt are used.
Is my data sent online?
No. The computation uses your browser’s Web Crypto API; the text is never transmitted.