Empty string
- Input
- ∅
- Expected output
- e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
The FIPS 180-4 value for an empty input, the first test any SHA-256 implementation has to pass.
Carregando ferramenta… / Loading tool…
sha-256 generator
SHA-256 returns a 256-bit digest as 64 hexadecimal characters and is the default choice for checksums, certificate signatures, and cache keys. Here the calculation is ready to go, focused on the algorithm's real technical use.
The FIPS 180-4 value for an empty input, the first test any SHA-256 implementation has to pass.
This kind of digest becomes an API payload cache key: two identical request bodies always generate the same 64-character hash, so it can serve as an identifier without re-reading the whole JSON.
Changing just the patch number, to "v2.5.1", already produces a completely different digest (starting with 9bb0d91e), which makes SHA-256 a good fingerprint for builds and version tags.
Yes. Text, files and HMAC secrets are processed directly in the browser without any upload.
No. SHA-256 was built to be fast, and a password needs the opposite: a slow salted function such as bcrypt, scrypt, or Argon2, that makes every guess expensive for whoever is attacking a leaked list.
The protocol applies SHA-256 to the output of another SHA-256, a practice called double hashing, adopted by Satoshi Nakamoto to mitigate a length-extension attack known at the time Bitcoin launched, in 2009.
No, no practical collision has been published so far. The 256-bit output space keeps a brute-force search out of reach of any current hardware, unlike what happened to MD5 in 2004 and SHA-1 in 2017.
—Hash moderno e amplamente suportado para integridade.
Text, files and secrets are processed locally. Nothing is sent to the server.