Back to the hasher

Privacy

This tool reads a file, computes its SHA-256 in your browser, and gives you the result. The file is never uploaded and never leaves your device.

This is a demonstration site. It does not convert documents — it computes a checksum, and it exists so that the way we build, sign and deliver software can be inspected by anyone rather than taken on trust. It is shown inside the BurnerDocs website, whose privacy policy covers its pages and this tool in full.

How it works

No server-side processing. The hashing runs in a WebAssembly module in your browser.
No file uploads. The file you choose is read in your browser, 64 KiB at a time, and nothing is sent anywhere.
Enforced by the browser, not by policy. The page is served with a Content-Security-Policy of connect-src 'self', which restricts the connections its code can make to this site. That binds our code too.
No cookies, no analytics services, no advertising, no third-party scripts on this page. Our host could set a security cookie only if it ever challenged a visit, which we configure it not to do.

What our CDN can see

Your browser downloads this page, its scripts and one WebAssembly module from Cloudflare, which hosts this site. Those are ordinary web requests, and Cloudflare processes them:

Request data. Your IP address and approximate location, the time, the file requested, the headers your browser sends (such as its user-agent and language), the connection's protocol and encryption, and the response. We can see statistics and details of individual requests in Cloudflare's dashboard for at least 31 days; Cloudflare also keeps request data for its own purposes, for periods it sets. We use it to confirm the module is being delivered correctly and to keep the site secure.

What those requests cannot reveal: the file you hashed, its name, its size, or the result. None of that is transmitted.

What is stored in your browser

Nothing is written. The page reads your theme preference (light or dark) if one is already stored for this site. Clearing site data removes it.

Verify this yourself

You do not have to believe any of the above. The module this page loads is listed, with its SHA-256, in this site's signed release manifest at /.well-known/provenance-manifest.json. Hash the module with this very tool and compare. That is what the tool is for.

Contact

Published by Franklin Softworks LLC. legal@franklinsoftworks.com.