SHA-256 hash of any text or file, in hex or Base64
Runs in your browser. Nothing you type is sent anywhere. Updated on 24 Oct 2026.SHA-256 is the hash behind software checksums, Git and Docker image IDs, and most modern signatures. Type text or drop a file and get its 64-character SHA-256 as you go, computed by the Web Crypto engine built into your browser. Switch to Base64 for Subresource Integrity attributes or HTTP digest headers, where the value is expected in that form.
The page opens with only SHA-256 selected.
Type or paste text into the box, or choose File and pick a file.
Choose Hex for the 64-character value, or Base64 for Subresource Integrity and digest headers.
Click Copy SHA-256.
This hash generator computes MD5, SHA-1, SHA-256, SHA-384 and SHA-512 for text you type or a file you choose, all at once. Results appear in hex or Base64 with one-click copy, and a compare box tells you plainly whether a file matches the checksum you expected.
The most common use is checking a download: an operating system image, an installer or a firmware file is published with a SHA-256 value, and comparing it proves the copy on your disk is complete and unaltered. Developers also use hashes to build cache keys, to fill Subresource Integrity attributes in HTML, and to check that two files are identical without comparing them byte by byte.
MD5 and SHA-1 are broken for security and should only be used to spot accidental damage. For anything that must resist tampering, use SHA-256 or stronger, and never store passwords as a plain hash. Nothing you type or choose leaves your device. Related tools: Base64 Encode and Decode, Password Generator, UUID Generator.
The rest of the article, and all 6 questions about Hash Generator, are on the Hash Generator page.
Choose File, pick the downloaded file, then paste the checksum from the download page into the Compare box. You get a clear match or no match. The algorithm is detected from the length of the checksum you paste.
Not for security. Researchers can create two different files with the same MD5 or SHA-1 hash. They are still fine for spotting accidental corruption in a download. Use SHA-256 or SHA-512 when tampering matters.
Hex and Base64 are the same hash bytes written two ways. Hex uses 0-9 and a-f, giving 64 characters for a SHA-256, and is the form checksum files and Git use. Base64 packs those same 32 bytes into 44 characters and is what Subresource Integrity attributes and HTTP digest headers expect.
Up to 4 GB. Files up to 256 MB are hashed in one pass with Web Crypto; larger ones are read in chunks with a progress bar, which takes a little longer but keeps memory use low. You can cancel at any time.
Still stuck? Ask about Hash Generator and anybody who knows can answer. No account needed.
Same job, other tools: GUID Generator – Generate GUIDs for .NET, SQL Server and Windows, in brace format · ULID Generator – Sortable 26-character ULIDs, monotonic within a millisecond, with a time decoder · Cron Expression Generator – Generate a cron expression by choosing when the job should run.
On the related tools: Grid Template Areas Generator – Type a page layout as named areas and get grid-template-areas with a rule for each part.
In the collection Security Tools for Developers.