File hash and checksum verifier

What you can do with Hash & Checksum Verifier

• MD5, SHA-1, SHA-256, SHA-384 and SHA-512 in one pass.
• Files up to 1 GB, read locally in the browser.
• Text hashing in UTF-8.
• Automatic comparison with an expected checksum, ignoring case, spaces and colons.
• Clear warnings when a match relies on MD5 or SHA-1.

How to use it

1. Copy the checksum from the vendor's official download page.
2. Choose the downloaded file.
3. Paste the checksum into Expected checksum.
4. Look for the Match result and which algorithm matched.
5. If there is no match, download the file again from the official source.

What a checksum proves

A matching SHA-256 hash shows the file is byte-for-byte identical to the one the publisher hashed. It catches corrupted downloads and tampered mirrors, but only if you take the checksum from a source you trust, such as the vendor's HTTPS site.

MD5 and SHA-1 are not enough for security

Researchers can create two different files with the same MD5 or SHA-1 hash. They still detect accidental corruption, but use SHA-256 or stronger whenever the publisher offers it.

Limitations

Files above 1 GB should be checked with a command-line tool such as Get-FileHash, certutil or sha256sum.

Frequently asked questions

How do I verify a download's SHA-256 checksum?

Choose the file, paste the published SHA-256 value into Expected checksum, and check for a match.

Is my file uploaded?

No. The file is read and hashed entirely in your browser.

Which algorithm should I use?

SHA-256 or stronger. Use MD5 or SHA-1 only when the publisher offers nothing else.

How do I check a hash on Windows?

Run Get-FileHash -Algorithm SHA256 <file> in PowerShell, or certutil -hashfile <file> SHA256.