Frequently asked questions
- Is my data uploaded to a server?
- No. Every operation runs inside your browser using JavaScript. Nothing you paste or type is sent to our servers, stored or logged. You can disconnect from the network after the page loads and the tool keeps working.
- Which algorithm should I use?
- SHA-256 unless something specific requires otherwise. MD5 and SHA-1 are broken: it is practical to construct two different inputs with the same digest, so they can detect accidental corruption but must never be relied on where someone might be trying to fool you.
- Can I hash a password with this?
- You can, but you should not store the result. Passwords need a slow algorithm built for the job, such as bcrypt, scrypt or Argon2, with a per-user salt. A fast hash like SHA-256 is exactly the wrong tool because being fast is what lets an attacker try billions of guesses.
- Why does the same text give a different digest elsewhere?
- Almost always a trailing newline or a different character encoding. This hashes the exact UTF-8 bytes of what you typed, with nothing added.
Related tools
Stuck on an error?
Every common JSON parse error is explained separately, with the cause and the fix: common JSON errors.
How your data is handled
Everything happens on your device. There is no upload, no storage and no logging, and only your interface preferences - theme, indentation, font size and word wrap - are kept between visits. Closing the tab clears the document.