What is an SHA-256 hash?

An SHA-256 hash is a 64-character string generated from file contents via the SHA-256 mathematical function. The exact same file always produces the exact same hash. Changing even a single bit results in a completely different hash. Hashes cannot be reversed back to the original file.

SHA-256 Hash: The Mathematical Fingerprint of Any File

Q: Can two different files produce the same hash?

The probability is 1 in 2^256 — a number greater than the total number of atoms in the observable universe. Mathematically possible, practically impossible.

Every file — documents, photos, recordings, source code — can be reduced to a unique 64-character string. This is not encryption, nor is it compression. This is a mathematical fingerprint.

Definition

An SHA-256 hash is the output of the SHA-256 mathematical function: a 64-character hexadecimal string (0-9, a-f) derived from the contents of a file. The exact same file yields the exact same hash. Even the smallest modification produces a completely different hash. There is no mathematical way to reverse a hash back into the original file.

Four Mathematical Properties of SHA-256

Deterministic

The same input always produces the exact same output. Period. On any computer, any operating system, any programming language. No hidden variables — pure function.

Avalanche Effect

Changing a single bit of input flips roughly 50% of the output bits. There is no statistical correlation between input changes and output results. Completely unpredictable.

One-Way Function

It is mathematically impossible to reconstruct the input from its hash. SHA-256 is not a cipher — there are no keys and no decryption routines. This transformation has no inverse.

Collision-Resistant

The probability of two different inputs producing the same output is 1 in 2²⁵⁶. This number exceeds the total count of atoms in the observable universe. Practically speaking: collisions do not happen.

Demonstration: The Avalanche Effect

Change a single character. The hash changes entirely. There is zero structural correlation between the two outputs.

SHA-256 — 1-Character Change

INPUT A "File version 1"

HASH A a3f8d2c1e9b4067f5d8a1c3e2b9f4d7a6e1c8b3f2d5a9e4c7b1f6d3a8e2c5b9f4

INPUT B "File version 2"

HASH B 7e2a9c4d1b8f3e6a5d2c9b7f4e1a8d3c6b9f2e5a7d4c1b8e3f6a9d2c5b7f4e1a8

No patterns. No correlations. This is not a coincidence — it is a deliberate mathematical property engineered to ensure that detecting even the minutest modification is deterministic and inescapable.

Why SHA-256 Is Globally Adopted

SHA-256 is an open standard (FIPS PUB 180-4, NIST) widely embraced due to its cryptographic maturity:

Financial & banking systems: Verifying transaction log integrity, audit trails, and reconciliation records — SHA-256 ensures data remains untampered post-processing.
Insurance companies: Claims, policies, and underwriting documents are hashed to prevent post-submission modifications.
Enterprise software distribution: Installer packages, system updates, and critical configuration files are verified with SHA-256 prior to deployment.
Digital archives & e-discovery: Institutions and enterprises use hashes to prove stored documents represent original, unaltered versions since archiving.
E-commerce & marketplaces: Transaction proofs, product images, and item specifications are hashed upon listing — mitigating "item not as described" disputes with mathematical evidence.
Startups & fundraising: Term sheets, investment agreements, and cap tables are hashed to establish proof of agreed versions prior to closing.
Real estate & notaries: Draft deeds, lease agreements, and certificate documents are hashed before signing — preventing unilateral alterations after consensus.
Logistics & supply chain: Bills of lading, delivery receipts, and cargo manifests are hashed to ensure zero tampering during multi-party transit.
Content creators & digital systems: Videos, music, designs, and publications are hashed prior to release — establishing mathematical proof of when a creation first existed.

With two decades of global deployment and zero practical collision attacks on full SHA-256, this standard powers the world's financial ledgers, digital banking, and critical infrastructure. It is not merely advanced; it is battle-tested.

Hashes Can Be Computed Without VerixID

Hashing is an open mathematical function. Anyone can compute a hash at any time:

Terminal — Compute SHA-256

Linux/Mac sha256sum document.pdf

Windows PS Get-FileHash document.pdf -Algorithm SHA256

Python import hashlib; hashlib.sha256(open('file','rb').read()).hexdigest()

Run the exact same command on the identical file on any computer anywhere in the world — the output will be identical. Hashes do not require VerixID. What VerixID provides is an immutable timestamp and an unalterable ledger.

Try It Now

Compute Hash + Record to Ledger

Drop your file on the home page. Your browser calculates SHA-256 locally. Only the hash is transmitted. Recorded on an immutable ledger. Done.

Start — Free

Frequently Asked Questions

Can a hash be reversed back to the original file?

No. SHA-256 is a one-way function. Mathematically, no inverse operation exists. There are no keys and no decryption routines. A hash is strictly a fingerprint — you cannot reconstruct a person's body from their fingerprint alone.

Can two different files produce the same hash?

Mathematically possible (known as a collision), but the probability is so infinitesimal that it never occurs in practice. Finding a collision requires roughly 2¹²⁸ attempts — longer than the age of the universe using current global computing power. To date, zero full SHA-256 collisions have ever been found.

Does simply opening a file change its hash?

Simply reading a file does not alter its hash. A hash changes only if the underlying file bytes change. However, certain applications (such as Word or Excel) inject metadata upon resaving. To maintain an identical hash, keep files in read-only mode after registration.

Why 64 characters? Could it be shorter?

SHA-256 outputs 256 bits. Represented in hexadecimal format (16 options per character), this results in 64 characters. This length is an optimal trade-off between uniqueness (collision resistance) and operational practicality. 256 bits provides 2²⁵⁶ possible outputs — more than sufficient for global applications.