What is Subresource Integrity?

SRI lets browsers verify that a fetched file (like a CDN script) hasn't been tampered with, by comparing it to a known hash.

Which algorithm should I use?

SHA-384 is the most common default; SHA-256 and SHA-512 are also valid choices.

Do I need crossorigin on the tag?

Yes, browsers require crossorigin="anonymous" alongside integrity for cross-origin resources.

SRI Hash Generator

Generate a Subresource Integrity hash for scripts and stylesheets.

Works Offline

Privacy First

No Login

No API

Hash algorithm

Tag type

Content (JS/CSS/text)

Drop a file here

Drop a .js or .css file to hash its content

Integrity output

integrity attribute

integrity=""

Resource URL for the snippet

Full tag snippet

<script src="https://example.com/lib.js" integrity="" crossorigin="anonymous"></script>

About the SRI Hash Generator

Paste JavaScript, CSS, or any text content (or drop a file) to generate a Subresource Integrity hash using SHA-256, SHA-384, or SHA-512. Get the integrity attribute plus a ready-to-use script or link tag snippet.

Examples

Hash a script

console.log('hi');

Output

integrity="sha384-..."

Related tools

AES Encrypt/Decrypt

Encoders & Crypto

Encrypt or decrypt text with AES-GCM and a passphrase.

Base32 Encoder

Encoders & Crypto

Encode or decode text using RFC 4648 Base32.

Base64 Encoder

Encoders & Crypto

Encode or decode text to/from Base64, UTF-8 safe.

Basic Auth Header Generator

Encoders & Crypto

Build or decode an HTTP Basic Authorization header.

Bcrypt Hash Generator

Encoders & Crypto

Generate and verify bcrypt password hashes with adjustable cost.

Checksum Comparator

Encoders & Crypto

Hash text or a file and compare against an expected checksum.

Frequently asked questions

Version 1.0.0 · Updated 2026-08-10 · Runs entirely in your browser