Skip to content
AldeaCode Logo
es
Developer100% local · 0 bytes sent

SHA Hash Generator

Generate cryptographic hashes for any text using the browser's native Web Crypto Subtle API. Four algorithms: SHA-1 (legacy, fast), SHA-256 (industry standard), SHA-384 and SHA-512 (extra long). All hashes update live as you type. Note: hashes are not encryption and never use SHA for passwords; use Argon2 or bcrypt server-side. Pair it with the UUID v4 Generator for unique inputs, the Base64 Encoder to encode the digest, or the Strong Password Generator when you need real secrets instead of fingerprints.

Loading…

How it works

Each hash is computed with crypto.subtle.digest(algorithm, bytes), which runs natively in the browser and is asynchronous. We feed the input through TextEncoder, await all four digests in parallel, and format the resulting bytes as hex.

How to use it

  1. Paste the input

    Drop in any text, a file path, or a configuration string. UTF-8 is handled correctly, including emoji and accents.

  2. Pick the hash family

    Choose SHA-1, SHA-256, SHA-384 or SHA-512. SHA-256 is the safe default for new code; SHA-1 only for legacy compatibility.

  3. Generate the digest

    The Web Crypto API runs the hash in your browser. The output appears in lowercase hex format, ready to compare or store.

  4. Copy or compare

    Use the copy button to grab the digest. Compare against a published checksum, a CI artifact, or a Git object hash.

Use cases

Compute a checksum to verify a downloaded file.

Generate a deterministic ID from a string.

Inspect what a hash of a known string looks like.

Build cache keys based on content hashes.

Educational demo of one-way hash functions.

When NOT to use it

  • For storing user passwords. SHA is too fast: a GPU can guess billions of hashes per second. Use Argon2, bcrypt or scrypt server-side with per-user salt.
  • As a digital signature. SHA does not authenticate origin, only integrity. You need HMAC, RSA or Ed25519 for that.
  • Where collision resistance matters and you are using SHA-1. SHA-1 is broken for that purpose since 2017. Use SHA-256 or higher.

Your data never leaves your browser

Every utility runs entirely on your device. Nothing is uploaded, nothing is stored on a server. You can disconnect from the internet and they keep working.

Frequently asked questions

Related tools

Curated next destinations. Use complementary tools in a pipeline; alternatives swap in for a different angle; next-step tools pick up where this one leaves off.

Pairs well with

Or use instead