SHA Generator

About SHA Generator

Choose any of eleven algorithms from the Hash Algorithm menu, SHA-1, SHA-224, SHA-256, SHA-384, SHA-512, SHA-512/224, SHA-512/256 or SHA3-224 through SHA3-512, and get the lowercase hex digest of your text. SHA-1, SHA-256, SHA-384 and SHA-512 use the browser's Web Crypto engine, and the remaining seven are computed by code inside the page. Every result matches sha256sum, OpenSSL and standard language libraries for the same UTF-8 bytes.

How to use it

1. Open the Hash Algorithm menu and pick a variant, for example SHA-256 or SHA3-256.
2. Type or paste into the Text to Hash box, or select Upload File to hash any file by its raw bytes.
3. Select the wide button labeled Generate followed by your algorithm, for example Generate SHA3-256 Hash.
4. Copy the digest from the output box with the copy button above it.

SHA3-256 of the standard test string

abc

3a985da74fe225b2045c172d6bd390bd855f086e3e9d525b46bfe24511431532

When to use it

• Writing test fixtures where a service expects the SHA-256 of a known string.
• Producing a SHA3-256 or SHA-224 reference value to compare against a library you are porting.
• Checking a documented digest of a short token or identifier before wiring it into a config file.
• Showing a class how a single changed letter produces a completely different digest.

Questions about SHA Generator

Which SHA variant should I choose?

SHA-256 is the sensible default. SHA-384 and SHA-512 are longer SHA-2 outputs of 96 and 128 hex characters. SHA-1 gives 40 characters and is kept for compatibility only, while SHA3 sizes suit designs that want a different construction.

How do SHA-2 and SHA-3 differ inside?

SHA-2 chains fixed-size blocks through a compression function, which makes it prone to length-extension when misused as a keyed hash. SHA-3 is a Keccak sponge with a 1600-bit state and does not have that weakness.

What are the SHA-512/224 and SHA-512/256 options?

They run the SHA-512 algorithm from different starting constants and keep only the first 224 or 256 bits. They are not simply a truncated SHA-512 result, so the digests differ from the first characters of SHA-512.

Why is SHA-1 marked not recommended?

Researchers produced a real SHA-1 collision in 2017, so two different documents can be built with the same digest. Existing systems such as older Git repositories still use it, but new designs should not.

Can I hash a binary file with Upload File?

Yes. A chosen file is read as raw bytes, so images, archives and disk images give the same digest as sha256sum. A line under the box shows the file name and size, and typing in the box switches back to text.

Does a trailing newline change the result?

Yes. The digest covers every character in the box, so a final line break yields a different value than the same words without it. Whitespace-only text is rejected, though a chosen file is always hashed.

Related tools

• MD5 GeneratorGenerate an MD5 hash from text
• Bcrypt GeneratorGenerate a bcrypt hash from text
• Whirlpool GeneratorGenerate a Whirlpool hash from text
• CRC32 checksum generatorCalculate the CRC32 checksum of text or a file in hexadecimal and decimal.
• Passphrase generatorGenerate memorable Diceware-style passphrases with a live strength estimate.
• Htpasswd generatorCreate Apache .htpasswd entries from a username and password.