What Is SHA-256? Hashing Explained Simply

What a hash is

Think of a hash as a fingerprint for data. Change one letter of the input and the fingerprint changes completely. Two different inputs producing the same fingerprint — a collision — is practically impossible for SHA-256.

The output is always the same length no matter the input: hashing the letter "a" and hashing an entire movie both produce 64 characters.

Why hashing is one-way

Hashing is not encryption. Encryption is a lock you can open with a key; hashing is more like blending a smoothie — you cannot un-blend it back into fruit. That one-way property is exactly what makes hashes useful for security.

What SHA-256 is used for

You rely on SHA-256 every day without seeing it:

• Password storage — sites store the hash of your password, not the password itself
• Download verification — compare a file's hash to the published one to prove it was not tampered with
• Bitcoin and other cryptocurrencies, which are built on SHA-256
• Digital signatures and certificates that secure websites

SHA-256 vs. SHA-1 and MD5

Older hash functions like MD5 and SHA-1 have known weaknesses — researchers can create collisions on purpose — so they should not be used for security. SHA-256 is part of the newer SHA-2 family and is the current everyday standard, with SHA-384 and SHA-512 offering even larger outputs.

Hash any text

Type or paste text into the Hash Generator and it instantly shows the SHA-1, SHA-256, SHA-384, and SHA-512 fingerprints side by side, each with a copy button. Hashing happens in your browser — your text is never sent anywhere.