Encode or decode Base64 and URL text, or hash text and local files with Web Crypto. Nothing is uploaded.
SHA-1 is broken for collision resistance — use it only for legacy checksums. MD5 is not included (would need a dependency) and is deferred.