How to generate a SHA-256 hash
- Paste your text. Type or paste it into the Text box. It stays in this tab.
- Pick an algorithm. Click SHA-256, SHA-512 or SHA-1. The digest appears straight away.
- Copy the result. Press Copy to put the hex digest on your clipboard.
Good to know
- Exact bytes count. The text is hashed as UTF-8, exactly as typed. A trailing space or newline gives a completely different hash, so trim it if you’re comparing with another tool.
- Lowercase hex. SHA-256 gives 64 characters, SHA-512 gives 128 and SHA-1 gives 40.
- SHA-1 is not for security. It has known collision attacks. Use it only to match older checksums or Git object ids, and use SHA-256 or SHA-512 for anything new.
- Not for storing passwords. A plain SHA hash is too fast to protect passwords. Use a slow password hash such as Argon2 or bcrypt for that.
- Text only. This hashes text you paste, not files. There’s no MD5 and no HMAC.
Your text stays on your device
People hash API tokens, secrets and customer emails, which shouldn’t be pasted into a site that sends them to a server. Here, the hash is computed inside this browser tab with the Web Crypto API built into your browser.
The page’s security policy tells your browser to block uploads, so your text can’t leave your device even by accident. You can check: open your browser’s developer tools, watch the Network tab, and hash something. How InTheTab works
You’ll also see a few small requests to Google Analytics. That’s our visit counter, and it never receives your files. Privacy policy
Questions
Why doesn’t my hash match the one from another tool?
Usually it’s whitespace. Command-line tools like echo add a newline unless you use echo -n. Check for trailing spaces or line breaks in the Text box too. As a test, the SHA-256 of abc is ba7816bf…f20015ad.
Can I reverse a hash back to the text?
No. SHA hashes are one-way. The only way to “reverse” one is to guess inputs and compare, which is why short or common text is easy to find from its hash.
Which algorithm should I use?
SHA-256 for most checksums and integrity checks. SHA-512 if a system asks for it. SHA-1 only to match something that already uses it.
Is it safe to hash a secret here?
Yes. The text is hashed by your own browser and never uploaded. We never get your files or text: the site has no accounts, and its only analytics, Google Analytics, counts visits without ever seeing what you add here.