A SHA-256 hash is a 64-character hexadecimal digest produced by the SHA-256 cryptographic algorithm. It acts like a digital fingerprint: the same input file or message always produces the same output, while even a tiny change creates a completely different hash. Security teams use it to verify file integrity, confirm that a download has not been altered, and identify a known file across systems.
In cyber security, SHA-256 hashes appear in malware analysis, incident response, and threat intelligence. Defenders compare hashes against known-good or known-bad records to spot suspicious files quickly. Attackers also encounter them when files are cataloged on leak sites, in logs, or in detection tools. A hash alone does not prove compromise or maliciousness; it must be matched to a specific file, artifact, or event. In practice, it is a precise identifier, not a verdict.