Is my text sent to a server?

No. The hash is computed locally using your browser's built-in Web Crypto API (crypto.subtle.digest). Your text never leaves your device and nothing is uploaded.

Is SHA-1 still safe to use?

SHA-1 is no longer considered secure against collision attacks and should not be used for digital signatures or password storage. It is still useful for non-security purposes such as file checksums, Git object IDs, and legacy integration where SHA-1 is required.

How long is a SHA-1 hash?

A SHA-1 hash is 160 bits, shown as 40 hexadecimal characters.

SHA-1 Hash Generator

SHA-1 hash generator

Paste any text and instantly get its SHA-1 digest — a 160-bit value shown as 40 hexadecimal characters. The hash updates as you type.

Hashing runs entirely in your browser using the standard Web Crypto API, so it is safe to use with sensitive strings — nothing is uploaded to any server.

SHA-1 is broken for collision resistance, so avoid it for signatures or password hashing. It remains handy for checksums, Git object identifiers, and legacy systems that still expect SHA-1.