Cette page n’est pas encore traduite en français : elle s’affiche en anglais.

SHA-256 Hash Generator

Type or paste text to get its SHA-256 hash — the 64-character fingerprint used for integrity checks, signatures and APIs — with HMAC-SHA256 for signing webhooks and requests.

Mis à jour le
Hash a file — choose or drop it here.
Processed locally, never uploaded (up to 512 MB).
Output
AlgorithmHash

Vos données ne quittent jamais votre ordinateur. Tout le traitement se fait localement dans votre navigateur.

Comment utiliser : SHA-256 Hash Generator

  1. Type or paste your text — SHA-256 and the other hashes update as you type.
  2. Turn on HMAC and enter a secret key to create an HMAC-SHA256 signature.
  3. Copy the hash, or paste an expected hash in the compare box to verify it.

What is SHA-256?

SHA-256 is part of the SHA-2 family designed by the NSA and standardized by NIST. It produces a 256-bit hash — 64 hex characters — and no practical collision has ever been found. It secures TLS certificates, Git object IDs (in SHA-256 repositories), software downloads, Bitcoin and countless APIs.

HMAC-SHA256 for webhooks and APIs

An HMAC combines a secret key with the message, so only someone with the key can produce the same signature. Stripe, GitHub, Shopify and many other services sign webhooks with HMAC-SHA256: compute it over the raw request body with your signing secret and compare it with the signature header. Turn on HMAC above to do exactly that.

SHA-256 is not for passwords on its own

SHA-256 is fast by design — great for checksums, bad for passwords, because attackers can try billions of guesses per second. Store passwords with a deliberately slow algorithm such as bcrypt, scrypt or Argon2.

Aussi recherché comme : sha256 generator, sha256 hash, sha-256 online, generate sha256, sha256 hash generator, hmac sha256, sha256 checksum, text to sha256.

Outils complémentaires : SHA-256 Hash Generator

  • Hash Generator — Compute MD5 and SHA hashes of any text or file instantly, create HMAC signatures, and paste an expected checksum to verify a download.
  • MD5 Hash Generator — Type or paste text to get its MD5 hash as you type — the 32-character hex fingerprint used for checksums, cache keys and legacy systems — with SHA-256 alongside for anything security-related.
  • HMAC Generator — Compute keyed HMAC signatures for API requests and webhooks, and check whether a received signature is valid — using your browser’s Web Crypto API.
  • JWT Encoder — Build a JWT for testing APIs: edit the payload, add standard claims with one click and sign it with an HMAC secret or an RSA / EC private key.

Questions fréquentes

How long is a SHA-256 hash?
256 bits — 64 hexadecimal characters, or 44 characters in Base64.
How do I verify a webhook signature with HMAC-SHA256?
Turn on HMAC, enter your signing secret, paste the raw request body as the text, and compare the result with the signature header (some providers send it in Base64 — switch the output format).
Is SHA-256 secure?
Yes. SHA-256 has no known practical collision or preimage attacks and is approved for use until at least 2030 by NIST.
Puis-je installer SHA-256 Hash Generator en tant qu’application web et l’utiliser hors ligne ?
Oui. SHA-256 Hash Generator est une application web installable (PWA) : elle s’installe depuis votre navigateur, sans passer par une boutique d’applications. Cliquez sur « Installer l’application » en haut de cette page dans Chrome ou Edge (Windows, macOS, Linux, ChromeOS) ; sur Android, utilisez « Partager » → « Ajouter à l’écran d’accueil » sur iPhone et iPad ; ou « Fichier » → « Ajouter au Dock » dans Safari 17+ sur Mac. L’application s’ouvre alors dans sa propre fenêtre avec sa propre icône, et comme elle s’exécute entièrement dans votre navigateur, elle continue de fonctionner hors ligne. Firefox sur ordinateur de bureau ne permet pas d’installer d’applications web. Comment fonctionne l’installation.

Outils similaires