Loona Hash Generator - SHA-1, SHA-256, SHA-384 & SHA-512
Need to check that two copies of a string are identical, produce a cache-busting fingerprint, or follow a tutorial that asks for a SHA-256 digest? Paste the text and all four standard digests appear together, ready to copy.
Note: SHA-1 is included for checksums and legacy compatibility only - it is not safe for passwords or security. For security use SHA-256 or stronger, with a proper password-hashing scheme such as bcrypt or Argon2 for passwords.
How to use the Hash Generator
- Type or paste the text to hash.
- Click Generate Hashes.
- Copy the digest you need from the results.
How it works
A cryptographic hash turns any input into a fixed-length fingerprint. The same input always gives the same fingerprint; changing even one character changes it completely; and the input cannot be reconstructed from the fingerprint. This tool feeds the UTF-8 bytes of your text to the Web Crypto API (crypto.subtle.digest) - native, audited browser cryptography, not a JavaScript re-implementation. SHA-256 produces 64 hex characters, SHA-512 produces 128, and SHA-1 produces 40. SHA-1's collision resistance is broken, which is why it is offered only for checksums and legacy systems that still ask for it.
Worked example
Hashing the word "abc" with SHA-256 always gives ba7816bf8f01cfea414140de5dae2223b00361a396177a9cb410ff61f20015ad - the published test vector used by engineers worldwide to check that a hash implementation is correct. Try it here and compare.
Frequently Asked Questions
Is this hash generator free?
Yes - free, no sign-up, no limits.
Is hashing the same as encryption?
No. A hash is one-way: it makes a fingerprint you can compare, but you cannot decrypt it back to the original text.
Why is SHA-1 marked "not for security"?
Researchers have produced real SHA-1 collisions, so it must not protect passwords, signatures or certificates. It is still fine as a quick file checksum where attacks are not a concern.
Should I hash passwords with SHA-256?
Not directly. Passwords need slow, salted password-hashing functions such as bcrypt, scrypt or Argon2 - fast hashes like SHA-256 let attackers guess billions of passwords per second.
Is my text uploaded to be hashed?
No. The hashing runs in your browser via Web Crypto; your text never leaves your device.
Related Developer Tools
JSON Formatter
Validate, pretty-print and minify JSON, with the exact position of any error.
Base64 Encoder & Decoder
Encode text and files to Base64, or decode it back - UTF-8 safe, URL-safe option included.
URL Encoder & Decoder
Percent-encode text and URLs safely, with a per-character breakdown table.