Subresource Integrity Hash

The Subresource Integrity Hash generator produces the cryptographic digest browsers use to verify that a script or stylesheet loaded from a CDN has not been altered.

Paste the exact contents of the file you serve, choose an algorithm, and the tool returns a base64-encoded SHA digest prefixed with the algorithm name — the value that goes inside an HTML integrity attribute, such as sha384-oqVuAfXR… A browser recomputes the hash of the fetched file and refuses to run it if the values do not match, which protects your visitors if the CDN is ever compromised.

You can pick any of the three algorithms the SRI specification permits: SHA-256, SHA-384 or SHA-512.

SHA-384 is the value most CDNs publish and a sensible default.

The tool also assembles a complete, paste-ready script snippet with the integrity attribute and crossorigin="anonymous" already set, so you can drop it straight into your markup.

Hashing happens entirely in your browser with the Web Crypto API — your file contents are never uploaded or logged.

One thing to remember: the hash must match the served bytes exactly, so generate it from the final, minified, built file you actually deploy rather than the source, and regenerate it whenever the file changes.