Free online tools that run in your browser
Your files never leave your device · No login required · 100% free
Convert, compress, calculate, generate, edit and check files right in your browser — fast, private and easy to use.
Search results
Popular tools
View all toolsBrowse by category
Popular file conversions
View all convertersProgramming
Learn and practise programming in your browser. Pick a language: write code, run it in a real terminal and follow the lessons step by step.
Why Shiklo Tools?
Simple, private tools that just work — right in your browser.
- Private Everything runs in your browser. Files are never uploaded.
- Secure Encrypted HTTPS connection, and nothing you open is stored on our servers.
- No login required No account, no sign-up, no email. Just open a tool and use it.
- Fast No upload or download wait — results appear instantly.
- Free All tools are free to use, with no limits.
- Works everywhere Phone, tablet or computer, in any modern browser.
🆕 New tools
★ Popular tools
Recently used
Frequently asked questions
Are my files or text uploaded anywhere?
No. Every tool runs inside your browser on your own device. Nothing you enter or open is sent to a server.
Do I need to create an account or log in?
No login is required. There are no accounts — open any tool and start using it straight away.
Are the tools really free?
Yes. All tools are free, with no limits or watermarks. The site is supported by ads.
Does it work on my phone?
Yes. The tools work in any modern browser on phones, tablets and computers.
Can I use the tools offline?
Once a tool has loaded it does its work on your device, so it keeps working even if your connection drops.
Which file types are supported?
PDF, Word, Excel, PowerPoint, OpenDocument and RTF documents, JPG, PNG, WebP, HEIC, AVIF, GIF and BMP images, MP4, MOV, WebM and MKV videos, MP3, WAV, M4A, OGG and FLAC audio, ZIP, 7z, RAR, TAR and GZIP archives, CSV, JSON, XML and plain text. Each tool lists exactly what it opens.
All tools with descriptions →
SRI Hash Generator
Create Subresource Integrity hashes (sha384 and more) for scripts and stylesheets, with the ready script or link tag to paste.
When a page loads a script or stylesheet from a CDN or another server, it trusts that file completely: if the server is hacked or the file is swapped, the attacker's code runs on your site with full access to your visitors' data. Subresource Integrity (SRI) prevents this. You add an integrity attribute containing a hash of the file you expect, and the browser refuses to use any file that doesn't match.
This tool makes that hash. Choose the file, paste its exact content, or give its public address (most CDNs allow the browser to read their files), pick SHA-384 or another algorithm, and copy the integrity value or the complete script or link tag with the crossorigin attribute already set. Hashing uses the browser's Web Crypto API, so your files stay on your device.
How to use SRI Hash Generator
- Choose File, URL or Pasted code.
- Add the file, fetch the address, or paste the exact code.
- Choose the hash algorithm (SHA-384 is the usual choice).
- Copy the integrity value or the ready HTML tag.
Features
- SHA-256, SHA-384 and SHA-512 integrity values.
- From a file, a public URL or pasted code.
- Ready script or stylesheet link tag with the crossorigin attribute.
- Files up to 50 MB.
- Web Crypto API in your browser.
How SRI works
The integrity attribute holds the algorithm and the Base64 hash of the file, such as sha384-oqVuAfXR…. When the browser downloads the file, it hashes it and compares. If the hashes differ — because the file was changed, corrupted or replaced — the browser blocks it and reports an error in the console. Cross-origin files also need crossorigin="anonymous" so the browser is allowed to read them for checking; the generated tag includes it.
| Part | Example |
|---|---|
| Algorithm | sha384 |
| Hash of the file, Base64 | H8BRh8j48O9oYatfu5AZzq6A9RINhZO5H16dQZngK7T62em8MUt1FLm52t+eX6xO |
| Required for other origins | crossorigin=anonymous |
Which algorithm?
SHA-384 is the most common choice and what most CDNs publish. SHA-256 and SHA-512 are also supported by all browsers. You can list several values separated by spaces and the browser uses the strongest one it knows. All three are far beyond any practical attack; what matters is hashing exactly the file the browser will download.
When the hash must change
Any change to the file — a new version, a different minified build, even an added line break — changes the hash. Always link to a fixed version of a library (lib@1.2.3, not lib@latest), and update the integrity value when you update the version. Files that a server changes per request or per browser, such as some font or analytics loaders, can't be protected with SRI.
Reading files from other servers
The URL option downloads the file in your browser. That works when the server allows cross-origin reading, which jsDelivr, cdnjs, unpkg and most CDNs do — the same permission the browser needs to check SRI later. If a server doesn't allow it, download the file and choose it here instead. Your files and code are never uploaded; only the address you enter is fetched, directly from your browser.
Related tools
Combine SRI with a Content-Security-Policy that limits where scripts may load from — the CSP Generator builds one — and check your site's response headers with the Security Headers Checker. To hash any file with many algorithms, use the Hash Generator.
Frequently asked questions
Do I need SRI for files on my own domain?
It is mainly for files from CDNs and other servers; files you serve yourself are already protected by your own server.
Can I list several hashes?
Yes. Separate them with spaces; the browser uses the strongest algorithm it supports.
How do I generate an SRI hash?
Choose the file or URL, pick SHA-384 and copy the integrity value or the HTML tag.
Which hash should I use for SRI?
SHA-384 is the common choice; SHA-256 and SHA-512 also work.
Why is crossorigin needed?
Browsers only check the integrity of files from other origins when they are fetched with CORS.
Why does my integrity check fail?
The file changed or isn't exactly the same build. Hash the exact file the page loads.
Can I hash a file on a CDN?
Yes, if the CDN allows cross-origin reading, which most do.
Is my code uploaded?
No. Hashing happens in your browser.
Does SRI work for CSS?
Yes. The tool creates a link tag for stylesheets.
Related tools
CSP GeneratorBuild a Content-Security-Policy header or meta tag from a strict starting point, and check any policy for common weaknesses.
Security Headers CheckerCheck a website's HTTP security headers — HSTS, CSP, X-Frame-Options, Referrer-Policy and more — get a grade and how to fix each gap.
Hash GeneratorGenerate MD5, SHA-1, SHA-256, SHA-512, SHA-3, BLAKE3 and CRC32 hashes of text or files of any size, with HMAC and checksum comparison. Private.
JavaScript MinifierMinify JavaScript with Terser: remove whitespace and comments, shorten local names and compress code, with syntax errors shown by line.
CSS MinifierMinify CSS: remove comments and whitespace, drop empty rules and redundant semicolons — safely, without changing how it works.
Permissions-Policy GeneratorBuild the Permissions-Policy header that turns off the camera, microphone, location and other browser features your site doesn't use.