SHA-384 Hash Generator
Generate SHA-384 hashes of text or files in hex or Base64 — including the Base64 digests used for Subresource Integrity (SRI) attributes.
How to use this tool
Steps for using the Hash Generator.
- Type or paste text, or choose File to hash a file of up to 50 MB. SHA-384 is listed first; the other algorithms are shown below it for comparison.
- The digest updates as you type. Pick hex, HEX (uppercase) or Base64 to match the format you need.
- Click Copy next to SHA-384, or Copy all / Download for every digest.
- For a Subresource Integrity attribute, choose Base64, hash the exact file you serve, and write it as
integrity="sha384-…".
Example
SHA-384 of the classic test sentence
The quick brown fox jumps over the lazy dogca737f1014a48f4c0b6dd43cb177b0afd9e5169367544c494011e3317dbf9a509cb1e5dc1e85a941bbee3d7f2afbc9b1Common use cases
- Generating
integrity="sha384-…"values for scripts and stylesheets loaded from a CDN. - Meeting standards that require a digest longer than 256 bits.
- Verifying files against published SHA-384 checksums.
- Avoiding length-extension issues where a plain hash is used as a MAC.
SHA-384 and Subresource Integrity
SHA-384 is a SHA-2 hash with a 384-bit digest — 96 hexadecimal characters. Internally it is SHA-512 with different starting values, cut to 384 bits, which also makes it resistant to the length-extension attacks that affect SHA-256 and SHA-512.
Its best-known use on the web is Subresource Integrity (SRI): <script src="…" integrity="sha384-…"> tells the browser to refuse a script or stylesheet whose SHA-384 doesn't match. The value after sha384- is the Base64 digest of the file — pick Base64 here and hash the exact file you serve.
SHA-384 is also used in TLS cipher suites and by some code-signing and government standards that ask for more than 256 bits.
This page computes it with the browser's Web Crypto API; files up to 50 MB are hashed locally.
Limitations
- SRI hashes must be of the exact bytes the CDN serves — a minified or re-encoded copy gives a different value.
- Files up to 50 MB.
- Not a password hash.
Frequently asked questions
How do I make an SRI hash?
Hash the exact file with SHA-384, choose Base64, and prefix it with sha384-. Paste the result into the integrity attribute and add crossorigin="anonymous" for files on another domain.
Is SHA-384 better than SHA-256?
Both are secure. SHA-384 gives a longer digest and isn't vulnerable to length extension; SHA-256 is shorter and more widely used. Pick whichever your standard or tooling expects.
How long is a SHA-384 hash?
384 bits — 96 hexadecimal characters, or 64 characters in Base64 (no padding).
Can I use SHA-256 or SHA-512 for SRI instead?
Yes — browsers accept sha256-, sha384- and sha512-. SHA-384 is simply the most common choice in CDN snippets.