SRI Hash Generator

Subresource Integrity (SRI) is a security feature that allows browsers to verify that resources they fetch (from CDNs or other origins) have not been manipulated. It works by comparing a cryptographic hash of the fetched file against the expected hash specified in the integrity attribute of a <script> or <link> tag.

When you include an SRI hash, the browser will:

• Download the resource from the CDN
• Compute the hash of the downloaded content
• Compare it to the integrity value you specified
• Only execute the resource if the hashes match

If a CDN is compromised and the file is altered, the hash won't match and the browser blocks the resource, protecting your users from malicious code.

1. Choose input mode — Either paste the resource content directly, or provide a URL to fetch. The URL method is convenient but may be blocked by CORS policies on some servers.
2. Select hash algorithm — Choose SHA-256, SHA-384, or SHA-512. SHA-384 is the most commonly used for SRI because it offers a good balance of security and performance. SHA-512 is the most secure but produces longer hashes.
3. Click Generate — The tool computes the hash entirely in your browser. No data is sent to any server.
4. Copy the integrity attribute — Use the generated integrity value in your <script> or <link> tags.
5. Add to your HTML — Place the full tag into your HTML. For example: <script src="https://cdn.example.com/lib.js" integrity="sha384-..." crossorigin="anonymous"></script>