Orpheus

SHA-256 Hash Generator

Hash text to SHA-256 or CRC-32, computed in your browser.

Options
Algorithm
Uppercase output
Result

Everything is processed in this tab. Nothing you paste is sent anywhere.

Every tool runs entirely in your browser. Your files are never uploaded to a server.

A hash turns any input into a fixed-length fingerprint. SHA-256 always produces 64 hexadecimal characters, changes completely if one character of the input changes, and cannot be reversed to recover the original text.

How to use SHA-256 Hash Generator

  1. Paste your text. The digest recalculates on every keystroke.
  2. Pick an algorithm. SHA-256 for anything cryptographic; CRC-32 only as a cheap change check.
  3. Copy the digest. Computed locally — the text is never transmitted.

About generating a hash

A cryptographic hash is a one-way function with three properties worth naming, because most misuse comes from assuming a fourth. It is deterministic, so the same input always gives the same digest. It is preimage-resistant, meaning you cannot work backwards from a digest to an input. And it is collision-resistant, meaning finding two inputs with the same digest is computationally infeasible. What it is emphatically not is secret: there is no key, so anyone can compute the same hash from the same input. That single fact explains most of the ways hashes are misused. Hashing an email address does not anonymise it, because the set of plausible email addresses is small enough to enumerate and check. Hashing a password without a salt is barely better, since rainbow tables for common passwords have existed for decades — and even with a salt, SHA-256 is the wrong tool because it is fast, and speed helps the attacker far more than the defender. The algorithms designed for passwords are deliberately slow and memory-hungry for exactly that reason. Where SHA-256 is right is integrity: verifying a download matches what the publisher built, detecting whether a file has changed, or fingerprinting content for deduplication.

Frequently asked questions

Can a hash be reversed?
Not by computation. But a hash of a short or common input can be looked up in precomputed tables, which is why hashing a password without a random salt provides very little protection. Hashing is not encryption and has no key.
Should I use this to hash passwords?
No. Password storage needs a deliberately slow algorithm with a per-user salt — bcrypt, scrypt or Argon2. SHA-256 is designed to be fast, which is exactly the wrong property when someone is guessing billions of candidates per second.
What is CRC-32 for?
Detecting accidental corruption, not deliberate tampering. It is what ZIP and PNG use to notice a damaged file. It is fast, only 32 bits, and trivially forgeable, so it should never be used as a security check.
Why does the hash change completely from one small edit?
By design. A good hash has the avalanche property: flipping one bit of input flips about half the output bits. That is what makes it useful for detecting change — two nearly identical files have completely unrelated digests.

Last updated