SHA256 is an odd choice given that there are ASICs readily available that can compute hashes crazy fast, made for Bitcoin mining. An ASIC-resistant/memory hard algorithm would be a better choice, possibly one of the Argon2 variants.