Skip to content
shellhacks.dev

SHA Hash Generator

Compute SHA-1, SHA-256, SHA-384 and SHA-512 digests of any text, in hex, using the browser's Web Crypto API.

Free · No sign-up · Your inputs stay in your browser

Input

Hash text with SHA

Output

Digests (hex)

SHA-1

…

SHA-256

…

SHA-384

…

SHA-512

…

Use these to check a download or compare two values. Never store passwords as a plain SHA digest: use bcrypt or Argon2, which PHP's password_hash() gives you.

Runs in this browser. Nothing you paste is sent to a server.

Matching another tool's output

A digest changes completely if one byte changes. When this tool and sha256sum disagree, the cause is almost always a trailing newline: echo "text" | sha256sum hashes the newline too, while printf "text" | sha256sum does not.

Not for passwords

SHA-256 is designed to be fast, which is exactly wrong for passwords: an attacker can try billions of guesses a second. Store passwords with a slow, salted algorithm such as bcrypt or Argon2id. In PHP that is password_hash(), and in Laravel the Hash facade.

Why no MD5?

Web Crypto does not offer MD5, and it should not be used for anything security-related; collisions can be produced on a laptop.

Share

Frequently asked questions

Can a SHA-256 hash be reversed?
Not directly. But short or common inputs can be found by guessing, which is why hashes of passwords or phone numbers are not anonymous.
Is SHA-1 still safe?
Not where collisions matter, such as signatures and certificates. It is still fine as a checksum for accidental corruption.
Is what I paste sent anywhere?
No. The tool runs entirely in your browser with JavaScript. Nothing you type or paste is sent to our server or stored.

Go deeper

Suggested reading

Keep planning

Similar tools