No. There is no known practical attack on either its collision or preimage resistance.

Developer Hashing

SHA256 generator

Text

The SHA-256 digest appears here as you type

Hashed in your browser · the file is never uploaded

Local · WebCrypto SHA-256

SHA-256 produces a 256-bit digest, written as 64 hexadecimal characters. It is the default choice for almost everything that needs a hash today: certificate signatures, Git object names in newer repositories, file checksums, and the proof-of-work in Bitcoin.

How to generate a SHA-256 hash

1 Paste the text. The digest appears immediately and updates on every keystroke.

2 Tap it to copy.

3 To hash a file rather than text, use the file hash checker instead.

A frequent misunderstanding is worth naming: SHA-256 is not encryption. Encryption is reversible with a key; hashing is not reversible at all. Nobody can decrypt a SHA-256 digest, and any site offering to do so is running a lookup table of previously-hashed common inputs. That is also the reason SHA-256 alone is unsuitable for storing passwords — it is fast, so an attacker can try billions of candidates a second against a stolen database.

Questions

How long is a SHA-256 hash? −

256 bits, shown as 64 hexadecimal characters. The length never changes, no matter how large the input.

Can SHA-256 be decrypted? +

Is SHA-256 broken? +

Should I use it for passwords? +

Why does adding a space change everything? +

Sources

RFC 1321 — the MD5 message-digest algorithm NIST FIPS 180-4 — secure hash standard MDN — SubtleCrypto.digest()

Was this tool any good?

INTERNAL SIGNAL ONLY · WE USE IT TO FIND TOOLS WORTH REBUILDING