SRI Generator
Build a Subresource Integrity value for a script or stylesheet. SHA-384 is the default. Paste the file text or choose a file, then copy the sha384 value into an integrity attribute. The digest is computed with Web Crypto in this tab. Nothing is uploaded, and the page does not fetch a URL.
Runs in your browser. Nothing is uploaded.
Standard Base64 with the algorithm prefix. Browsers check it when the tag sets crossorigin.
Integrity
-
About this tool
Build the integrity value browsers check before they run a script or apply a stylesheet loaded from another origin. SHA-384 is the default. SHA-256 and SHA-512 are available too. The result is the algorithm prefix plus standard Base64, the form an integrity attribute expects.
How to use: paste the file text or choose the file you will host, pick the algorithm, and copy the value. Put it on the script or link tag next to crossorigin. This page does not request the URL. It hashes the bytes you give it.
Example: a short console.log file becomes sha384- followed by a Base64 digest. The same bytes and algorithm always produce the same value, so you can compare it with a checksum you already trust.
The digest is computed with Web Crypto in this tab. Source text and files stay on the device. Related: the hash generator when you need hex or MD5 instead of an integrity attribute. After the page loads, hashing works offline.
FAQ
Related Crypto tools
Hash Generator
Generate cryptographic hashes (SHA-256, SHA-1, MD5, and more) from text using Web Crypto in your browser. Create checksums for files-as-text, compare digests, and copy hex output. Hashing never leaves the tab, so test strings and secrets stay private.
HMAC Generator
Compute HMAC-SHA signatures in the browser for webhook secrets and API signing. Paste a message and a key, pick SHA-1 through SHA-512, and copy hex or Base64. Keys stay in the tab.
JWT Decoder
Decode JSON Web Tokens locally to inspect the header, payload, and expiry claims. Paste a JWT and read Base64URL-encoded fields without verifying signatures on a remote service. Ideal for debugging auth flows while keeping tokens off the network.
JWT Encoder
Sign a JSON object into a compact HS256, HS384, or HS512 JSON Web Token in the browser. The HMAC secret stays in the tab, so you can mint a test token without posting it to a hosted encoder.
AES Encrypt
Encrypt and decrypt text with AES-256-GCM in the browser. A password is stretched with PBKDF2; output is Base64(salt + IV + ciphertext). Useful for sharing a short secret over a side channel you control. Keys never leave the tab.
TOTP Generator
Compute a time-based one-time password from a Base32 secret with HMAC-SHA, the same algorithm authenticator apps use (RFC 6238). Pick SHA-1, SHA-256, or SHA-512, 6 or 8 digits, and a 30- or 60-second step. The secret stays in the tab.