Running on your device · 0 bytes uploaded

# Subresource integrity hash

Hash a script or style into an integrity= attribute — text or file, sha256/384/512 — and inspect an existing attribute. The hash is computed locally; the file never uploads.
Paste textPick a fileScript / stylesheet textResource URL (optional)

Used only to build the ready-to-paste tag.
sha256sha384sha512Hashintegrity= valueInspect

- It cannot fetch the URL to verify the served bytes still match — paste the actual file, or hash the served script yourself.
- integrity on same-origin files is pointless (you already control them); it protects third-party CDNs.
- crossorigin=anonymous is usually needed alongside integrity for CORS-fetched subresources.
Nothing in yet

Paste, drop, or type to begin. Everything stays on this device.

paste text or pick a file, then hash

## Next door in Web

- [Hash generator](/crypto/hash)
- [CSP evaluator & builder](/web/csp)
[All web tools](/web)

---

Canonical HTML: https://nutter.tools/web/sri
Markdown version: https://nutter.tools/web/sri/index.md
Plain-text version: https://nutter.tools/web/sri/index.txt
Agent index: https://nutter.tools/llms.txt