File Hash Checker

Downloaded software often comes with a checksum so you can confirm the file is genuine and intact. Drop a file here and this calculates its MD5, SHA-1, SHA-256, SHA-384 and SHA-512 hashes, then compares them with the one you paste. The file stays on your device.

How to use it

1. Choose or drop a file.
2. Wait for the hashes to appear.
3. Paste the publisher's checksum to compare.
4. Read the match result.

When it helps

• Verifying a download.
• Checking a backup is identical to the original.
• Confirming a file wasn't corrupted in transfer.
• Comparing two files by hash.

Good to know

• Prefer SHA-256 or stronger for security checks.
• Get the expected hash from the publisher's official site, not from the same page as the download.
• A mismatch means the file differs: download it again, and don't open it if it still doesn't match.

What a file hash is

A file hash is a fingerprint of every byte in the file. Change one bit and the hash changes completely, so matching hashes mean identical files. Publishers list hashes, usually SHA-256, so you can confirm your download wasn't corrupted or swapped.

The tool computes five common hashes at once, so you can compare against whichever the publisher used.

Worked example: checking an installer

You download a program and the site lists a SHA-256 checksum. Drop the file here, wait a moment, paste the published value into the compare box, and read the result. A tick means it matches.

If it doesn't match, delete the file and download again from the official site.

Hash algorithms compared

MD5 and SHA-1 are fast but broken against deliberate attacks, so use them only for detecting accidents. SHA-256 and SHA-512 are strong and widely supported. SHA-384 is a truncated variant of SHA-512.

When both options are offered, always prefer SHA-256 or stronger.

Limits and privacy

The whole file is read into your browser's memory, so very large files are capped at 200 MB. Nothing is uploaded, which means you can safely check private documents.

A matching hash only proves the file equals what the hash was made from. If an attacker controls both the file and the hash on the page, it proves nothing, so get hashes from a trusted source.

Hashing as a habit

Get into the habit of checking hashes for software, firmware and disk images, especially from mirrors or torrents. Keep a record of the hashes of important backups so you can detect silent corruption later.

Many download pages and package managers publish hashes alongside files.

Comparing two files

To check whether two files are identical, hash both and compare the SHA-256 values. If they match, the files are byte for byte the same, even when the names or dates differ. That's a quick way to find duplicates among downloads.

Questions