Hash Generator
Hash text with SHA-1, SHA-256, or SHA-512 using the browser's native Web Crypto implementation. Useful for verifying checksums and comparing fingerprints without installing anything.
Runs entirely in your browser. Nothing you paste is uploaded.
Hash will appear here...
About the Hash Generator
These are the SHA-2 family (plus legacy SHA-1), designed to be fast. That speed is a feature for integrity checking and a serious liability for password storage: a modern GPU computes billions of SHA-256 hashes per second, which makes brute-forcing hashed passwords trivial.
For passwords, use a deliberately slow, memory-hard function — Argon2id first, bcrypt or scrypt if Argon2 is unavailable. Never SHA-256, salted or not.
SHA-1 is included because you still meet it in Git object IDs and legacy systems, but it has been collision-broken since 2017 and must not be used where collision resistance matters.
Frequently asked questions
Can I use SHA-256 for password hashing?
No. It is far too fast, which makes offline brute-force cheap. Use Argon2id, bcrypt or scrypt, all of which are deliberately slow and tunable.
Is SHA-1 still safe?
Not for anything security-relevant. Practical collisions have existed since 2017. It survives in Git and older protocols but should never be chosen for new work.
Why does my hash differ from another tool's?
Almost always a text encoding or trailing newline difference. This tool hashes the UTF-8 bytes of exactly what you type; command-line echo appends a newline unless you pass -n.