How to use
- Type text, or switch to File and choose the file to check.
- Paste the expected SHA-256 checksum to compare.
- Add other algorithms such as SHA-512 or SHA3-256 if needed.
- Copy the hash.
Options explained
- HMAC-SHA256
- Adds a secret key to produce an HMAC, the signature used by many webhooks and APIs to prove a message was not changed.
- Compare
- Paste a published checksum; the tool ignores case and surrounding spaces and tells you whether it matches.
Examples
| Input | SHA-256 |
|---|---|
| (empty) | e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 |
| hello | 2cf24dba5fb0a30e26e83b2ac5b9e29e1b161e5c1fa7425e73043362938b9824 |
Frequently asked questions
Is SHA-256 secure?
Yes. No practical attack can find two inputs with the same SHA-256 hash. For storing passwords, however, use a slow password hash such as bcrypt or Argon2 instead of any plain hash.
How do I verify a downloaded file?
Choose the file, paste the SHA-256 checksum from the download page, and check that it matches. A mismatch means the file is corrupted or not the one the publisher released.
Are my files uploaded?
No. The file is read and hashed in your browser.
Privacy
This tool runs entirely in your browser. Your files and text are processed on your device and are never uploaded to our servers.