Hash (SHA)
Generate SHA-1, SHA-256, SHA-384 and SHA-512 hashes from your text.
About this tool
Hashing transforms any text into a fixed-length hexadecimal string using a one-way mathematical function. Given the same input, the function always produces the same hash. Unlike encryption, a hash cannot be reversed to obtain the original text — which is why hashes are widely used to verify integrity and store passwords.
This tool simultaneously generates four algorithms from the SHA family: **SHA-1** (40 hex characters), **SHA-256** (64 characters), **SHA-384** (96 characters) and **SHA-512** (128 characters). Just type or paste text in the field and all four hashes appear in real time. Click any result row to copy it to your clipboard.
Common use cases include: verifying the integrity of a downloaded file by comparing its hash against the one published by the provider, securely storing passwords (combined with a salt), creating digital message signatures, generating deterministic unique identifiers from content, and confirming that two files are identical without comparing them byte by byte.
All computation is performed by the browser's native Web Crypto API, which is hardware-accelerated on modern devices. No data is transmitted to external servers. No login or installation is required.
Frequently asked questions
Is the tool free?
Yes, completely free.
Is my data sent to a server?
No. The hash is computed locally by your browser's Web Crypto API. No information leaves your device.
Does it work on mobile?
Yes, in any modern browser for Android and iOS.
Which algorithm should I use?
For new projects, prefer SHA-256 or SHA-512. SHA-1 is considered weak for security use and should be avoided in critical contexts. For verifying the integrity of downloaded files, use the algorithm specified by the file's provider.
Can I use this tool to hash user passwords?
For passwords, purpose-built algorithms like bcrypt or Argon2 are recommended because they include automatic salting and are intentionally slow. Plain SHA is too fast, making it vulnerable to brute-force attacks in a password context.