CONVERTER

String to SHA-1

Generate the SHA-1 hash of any text. Free online tool — plus why SHA-1 is fine as a checksum but deprecated for security.

Open the hash generator →All free tools

Paste text and get its SHA-1 digest — a 40-character hex fingerprint. SHA-1 is fast and still appears in legacy systems, but it is deprecated for security after practical collisions.

Where SHA-1 is acceptable

As a non-security checksum — deduplication, quick integrity checks, matching against a legacy SHA-1 value — SHA-1 is fine and widely supported. Git famously uses it for object IDs. HMAC-SHA1 also remains safe, which is why TOTP still uses it.

Do not use it for signing

For signatures, certificates, or anything an attacker could target, SHA-1 is broken — collisions are practical. Use SHA-256 there. Our tool also outputs SHA-256 and SHA-512 for exactly that reason.

Try it now — free, no signup

Use the hash generator in your browser. Then, when you need it at scale with an API key and higher limits, grab the full Eveses API.

Open the hash generator →Sign up for the full API

FAQ

Is SHA-1 safe to use?›
Only as a non-security checksum or inside HMAC. For signing or certificates, use SHA-256.
How long is a SHA-1 hash?›
160 bits — 40 hexadecimal characters.

Related

What is SHA-1?SHA-1 is a 160-bit hash that is now broken for security after practical collisions. Learn where it lingers and hash text free.String to SHA-256Generate the SHA-256 hash of any text instantly. Free online SHA-256 tool, plus when to use it (and when not to).SHA-256 vs MD5: what is the difference?MD5 is fast but broken for security; SHA-256 is the modern default. Learn the difference and hash any text free with MD5, SHA-1, SHA-256/512.