Hash Generator - DigiKitApp

Generate a SHA-256/SHA-1/SHA-384/SHA-512 hash of text.

When should you use this?

Use this when you need to generate a hash value to verify a file's or text's integrity, checking that a downloaded file matches the original, for example.

When shouldn't you use this?

Don't use old or weak hash algorithms like MD5 to store passwords; password hashing is outside the scope of this general-purpose tool and requires purpose-built methods like bcrypt.

Step-by-step

Type or paste the text you want to hash into the Text field.
Choose SHA-256, SHA-1, SHA-384 or SHA-512 from the Algorithm list. Without a specific requirement, SHA-256 is a sensible default.
Click Run.
Copy the hexadecimal string from the result and put it next to the value you're comparing against.

Example

You're integrating with an API that wants a SHA-256 hash of a specific string you send, and you're not sure your code computes it correctly. Paste the same string here, choose SHA-256 and run it to get a 64-character result. If it matches your code's output exactly, the calculation is right. If not, the problem is usually in the input: a trailing newline or a different character encoding changes the entire hash.

Output length also tells you which algorithm you're looking at. In hex, SHA-1 is 40 characters, SHA-256 is 64, SHA-384 is 96 and SHA-512 is 128.

What is a hash?

A hash is a one-way operation that produces a fixed-length digest from any data. The same input always gives the same output; changing a single character changes the output completely. The tool supports SHA-1, SHA-256, SHA-384 and SHA-512 and does the calculation in your browser.

When using hashes

A hash is not encryption and cannot be reversed; it is not used to recover the data.
To verify file integrity, compare with the hash on the download page.
SHA-1 is no longer recommended for security purposes; prefer SHA-256 or higher for new work.
A fast hash alone is not enough for storing passwords; salted, slow dedicated algorithms are used for that.

Things to keep in mind

A hash isn't encryption and can't be reversed. You can't get the original text back from it, only check whether the same text produces the same hash.
Changing a single letter, space or capital gives a completely different result. If two values don't match, look for invisible characters first.
Practical collision attacks against SHA-1 have been demonstrated. For signatures or new security work, use SHA-256 or stronger.
This tool hashes the text you type. To verify the checksum of a large downloaded file, your operating system's command-line tools are a better fit.

Frequently asked questions

Is the code/data I enter stored anywhere?

No, nothing is sent to a server or stored; processing happens entirely in your browser.

Does it work with large inputs?

Yes, though performance may degrade with very large inputs (several MB or more).

Is this tool free?

Yes, it's completely free for core use and requires no account.