What Is SHA-256? Hash Explained with Examples
Short answer
SHA-256 is a cryptographic hash function that turns any input into a fixed 256-bit (64-character hex) fingerprint. Use our Hash Generator to compute one locally for checksums; never treat a hash of a password alone as full password storage without a proper scheme.
Developers, security teams and download sites use SHA-256 so people can check that a file was not altered. The same input always produces the same hash; a tiny change produces a completely different hash.
What does SHA-256 produce?
The output is 256 bits, usually shown as 64 hexadecimal characters. It is not encryption: you cannot reverse a hash to get the original text. NIST specifies SHA-256 in the Secure Hash Standard (FIPS 180-4).
How to generate a SHA-256 hash
- Open the Hash Generator.
- Paste text or note the file checksum method your OS documents.
- Copy the hex digest and compare it to the publisher's published checksum.
Worked example
Hashing the ASCII text hello with SHA-256 yields a fixed hex string (try it in the tool). Changing one letter to Hello yields a totally different digest. That avalanche effect is why checksums catch corruption.
Passwords and JWT notes
Do not store plain SHA-256(password) as a login hash; use a slow password hashing scheme designed for passwords. For inspecting tokens, see the JWT decoder. Prefer strong unique passwords from a password generator.
Last updated: 14 Oct 2026. Educational only. ViralScopeHub is not responsible for security decisions on your systems.
Frequently asked questions
Is SHA-256 the same as encryption?
No. A hash is one-way. Encryption is designed to be reversed with a key.
Can two files share a SHA-256 hash?
A collision is theoretically possible but extraordinarily hard for SHA-256 in normal use.
Why do download sites publish SHA-256 sums?
So you can verify the file you received matches the publisher file.
Should I hash passwords with SHA-256 alone?
No. Use a dedicated password hashing algorithm with salt and work factor.
Where is SHA-256 standardized?
NIST FIPS 180-4 (Secure Hash Standard) and related RFCs describe SHA-2 family hashes.