SHA-256 hasher for Customer Match and enhanced conversions
Hash an email, phone number or name the way Google or Meta wants it, or hash a whole customer list. Everything stays in your browser. Nothing you type leaves this page.
Nothing you type leaves this page. Hashing runs in your browser, and this page sends us no values.
Each platform has its own rules, so the same person can hash differently.
Sample shown. Type over it with yours.
Hashed as
janedoe@gmail.com
Changes made
lowercased, removed the dots before the @
Base64
1hFzBkhe0OUK+rOshx6Y+BaZFR8wKBUn1j/18jNlbGk=
Nothing you type or upload leaves your device. Hashing runs in your browser, using the Web Crypto API built into it. This page loads no ad tags and no session recording, and we only count that the tool was used, never what went into it. Check your browser’s network tab if you’d like to see that for yourself.
How to use the SHA-256 hasher
Pick where the data is going. The rules differ between Customer Match, enhanced conversions and Meta.
Pick the type of data and type the value. Hashed as shows the exact text that went in.
Copy the hash. It’s lowercase hex, 64 characters long.
For a list, open Customer list, then paste it or choose a CSV. The file stays on your device, and you download the hashed copy.
How do you normalize data before hashing?
A hash only matches when both sides hash the same text, so normalize first. Customer Match and enhanced conversions want trimmed, lowercase values and E.164 phone numbers with the plus sign. Meta wants phone numbers with symbols removed. One stray capital or space gives a completely different hash.
No. Hashing runs in your browser through the Web Crypto API, and nothing you type is sent to us or anyone else. This page loads no ad tags and no session recording, and we only count that the tool was used. Load the page, go offline, and it still works.
How do I hash an email for Customer Match?
Trim the spaces, lowercase the address, and remove the dots before the @ in gmail.com and googlemail.com addresses. Then hash it with SHA-256 and use the hex output. That’s Google’s own list. You can also upload plain text, and Google Ads hashes the file on your computer first.
Is the hash the same for Customer Match and enhanced conversions?
Not always. Enhanced conversions also removes the +suffix from gmail.com and googlemail.com addresses, and Google says those email rules differ from how Customer Match handles variations. So jane+news@gmail.com hashes differently between the two. Other domains come out the same, so pick the right target before you hash.
What does a Customer Match file need?
Google needs the exact English headers Email, Phone, First Name, Last Name, Country and Zip. Matching on a mailing address needs the last four together. Country and Zip stay unhashed. The Customer list tab keeps those names, hashes the first four columns and leaves everything else as it is.
Is a hashed email still personal data?
Treat it as personal data. The US Federal Trade Commission says hashing doesn’t make data anonymous, because common identifiers like emails can be guessed and hashed again to find a match. Hashing protects the value on its way to the platform. Your consent and data rules still apply to the list.
Why doesn’t my hash match?
One changed character gives a completely different hash. The usual causes are a capital letter, a trailing space, a phone number with no country code, or hashing a value twice. Compare the Hashed as line here with what your system hashes. An uppercase hex string also fails a plain text comparison.
What is SHA-256?
SHA-256 is a one-way hash function. It turns any text into a fixed 64-character hex string, and the same text always gives the same string. You can’t run it backwards with a formula, which is why ad platforms use it to match customer lists without being handed plain emails.
Set up Google Ads enhanced conversions with current web, CRM and Data Manager requirements. Verify hashing, consent, delivery coverage and diagnostics.
Build warehouse audiences for Google Ads, Meta and HubSpot with clear entry and exit rules, marketer self-serve guardrails and honest match-rate checks.
Send qualified leads and customer outcomes back to ad platforms. Design stable IDs, consent handling, upload monitoring and a controlled bidding rollout.