Everything is computed locally (Web Crypto + a small MD5 implementation) · MD5 and SHA-1 are shown for checksums/compatibility only — do not use them for passwords or signatures