SHA-256 Generator

Generate a SHA-256 digest from text encoded as UTF-8. The result contains 256 bits, displayed here as 64 lowercase hexadecimal characters. A digest does not contain a decryptable copy of the text. Predictable inputs can still be tested by hashing candidates and comparing the results.

The SHA-256 result updates as you edit the text:

1. Enter the input string that you want to hash in the input field.
2. The SHA-256 hash value will immediately be displayed in the output field.
3. Click the "Copy" button to copy the SHA-256 hash to your clipboard.

SHA-256 hashes the exact input bytes. A trailing newline, a space, or a different text encoding changes the digest. This tool hashes the text you enter and displays the result as hexadecimal. Use File Checksum for the bytes of a downloaded file.

Input: abc (no newline)
SHA-256: ba7816bf8f01cfea414140de5dae2223b00361a396177a9cb410ff61f20015ad

Input: abc followed by one LF newline
SHA-256: edeaaff3f1774ad2888673770c6d64097e391bc362d7d6fb34982ddf0efd18cb

The second input ends with a real line-feed byte, not the two characters \n. For file checks, follow Building Checksum Workflows with SHA-256. To compare algorithms, read SHA-256, MD5, and bcrypt: when to use each.

SHA-256 is a one-way hash function: there is no decryption key or direct inverse operation. Someone can still guess an input, hash that candidate, and compare the digest, which is why raw SHA-256 is unsuitable for password storage. The algorithm accepts input of any size and returns a 256-bit output. Its useful properties include:

• Deterministic: For the same input message, the output hash value will always be the same.
• Collision resistant: finding two different inputs with the same digest is designed to be impractical.
• Byte sensitive: even a small input change normally produces a very different digest.

The SHA-256 algorithm consists of several rounds of hashing, where each round generates a "message schedule" that's used in the next round. The input message is first padded with a series of 0s and 1s to ensure that its length is a multiple of 512 bits. The padded message is then divided into 512-bit blocks, and each block goes through a series of transformations to generate the final hash value.

SHA-256 is useful for file checksums, deterministic fingerprints, HMACs, and as one part of digital-signature schemes. Compare the digest with an expected value from a source you trust. To verify the publisher as well, check a digital signature.

• File integrity: compare a file's digest with an expected SHA-256 value obtained from a trusted source.
• Digital signatures: signature algorithms commonly hash the message before applying the algorithm's signing operation; signature verification is not "decrypting a hash."
• Password storage: do not store passwords with raw SHA-256. For new systems, use a password-hashing function such as Argon2id.

Encrypt Online offers many other Hashing & Encryption tools. For a full list of tools, visit the Tools Page.