Text tool

Hash anything, locally.

SHA-1, SHA-256, SHA-384 and SHA-512 at once, computed by the browser's own crypto implementation. Nothing is sent anywhere.

Free, no sign-up
Nothing is uploaded
No watermark, no limits

Hash generator

Free

Text to hash

Hashes

Runs entirely in your browser. Nothing is uploaded.

Worth knowing

How to get this right.

01

A hash is one-way, and that is the point
You cannot reverse a hash back into its input. What people call "cracking" one is guessing inputs until a hash matches. That is fast for short, common inputs — which is exactly why hashing a password with plain SHA-256 is not enough.
02

Never store passwords as SHA-256
General-purpose hashes are designed to be fast, and speed is the enemy here. Password storage needs a deliberately slow algorithm with a per-user salt: bcrypt, scrypt or Argon2. Use these hashes for integrity checks and fingerprints, not credentials.
03

SHA-1 is here for compatibility, not for security
Practical collisions against SHA-1 were demonstrated in 2017. It is still used by older systems and Git object IDs, so it is included for checking against those — but never choose it for anything new. SHA-256 is the sane default.

Questions

About this tool.

Is my text sent to a server?

No. Hashing uses the Web Crypto API built into your browser. Nothing is transmitted or logged.

Can I reverse a hash?

No. Hashing destroys information — many inputs map to each hash. Lookup tables can recover short common inputs, which is a reason to salt, not a way to reverse the function.

Why do I need https for this to work?

The Web Crypto API is restricted to secure contexts. On the live site it works normally; if you open the page as a local file it will not, and the tool says so rather than failing silently.

Which one should I use?

SHA-256 unless something specific requires otherwise. SHA-512 is not meaningfully more secure for most purposes and is longer to handle. SHA-1 only for compatibility with an existing system.

More free tools