SHA-224 Generator

SHA-224 is a member of the SHA-2 family defined in FIPS 180-4. It runs the same compression function as SHA-256 with different initial values and truncates the result to 224 bits. The output is 28 bytes, shown as 56 hexadecimal characters.

The tool encodes the text exactly as entered as UTF-8 and hashes those bytes. Spaces, tabs and line breaks count, so a trailing newline gives a different digest. Characters outside ASCII, such as accented letters or emoji, take two to four bytes each.

Hashing empty input returns d14a028c2a3a2bc9476102bb288234c415a2b01f828ea62ac5b3e42f. The text abc gives 23097d223405d8228642a477bda255b32aadbce4bda0b3f7e36c9da7, the published test vector. You can use both values to confirm that another implementation agrees with this one.

Both show the same 28 bytes. Hex writes each byte as two lowercase characters, giving 56 characters, while Base64 packs them into 40 characters with padding. Choose the form your configuration file, header or API expects.

SHA-224 has no known practical collision or preimage attack and offers about 112 bits of collision resistance. It is weaker than SHA-256 only because its output is shorter. For new designs, SHA-256 or SHA-384 are the more common choices.

SHA-224 is mostly used where a protocol or standard requires it, or where a shorter digest saves space while matching the 112-bit security of 2048-bit RSA or 3DES. Its cost is the same as SHA-256. If nothing requires SHA-224, SHA-256 is the safer default for compatibility.

The tool hashes text you paste, not uploaded files. For binary files, use a command such as openssl dgst -sha224 or sha224sum on your machine. Pasting a text file's contents gives the same digest only if the line endings and encoding match exactly.

No. SHA-224 is fast by design, so attackers can test billions of guesses per second. Store passwords with a slow, salted function such as bcrypt or Argon2, which the Bcrypt Generator and Argon2 Generator on this site produce.

You can hash up to 5 MiB of text in one request. The hash is computed on the server in a single pass and nothing is stored or logged. Larger data is better hashed locally with a command-line tool.

Yes. SHA-224 is deterministic, so identical bytes always give the identical digest on every system. Even a one-character change produces a completely different result, which makes the hash useful for spotting accidental changes.