Developer 🔒 Runs in your browser — no data sent to servers

File Checksum Checker

Check that a downloaded file is intact by comparing its hash with the checksum the publisher lists, all in your browser.

Input Text

Input File

↑

Click or drag a file here

Any file type — max 50 MB. The file never leaves your device.

Password

Cost: Prefix:

Each step up doubles the work. 10 is PHP's default; 12 is a common choice for new systems.

How to Use

Drop the downloaded file onto the upload area, or click it to choose one up to 50 MB.
Wait a moment while MD5, SHA-1, SHA-256, SHA-384 and SHA-512 are calculated.
Copy the checksum from the download page and paste it into the verify box.
A green match names the algorithm; "No match" means the file differs from the published one.

Frequently Asked Questions

Do I need to know which algorithm the checksum uses?

No. Paste the value and the checker compares it with every hash it calculated. The length also gives it away: 32 hex characters is MD5, 64 is SHA-256 and 128 is SHA-512.

Is my file uploaded?

No. The file is read and hashed locally in your browser, which also makes large downloads quick to check.

What does a mismatch mean?

The file is not identical to the one the publisher hashed. The download may be incomplete or corrupted, or it may come from a different release, so download it again from the official source.

Can I paste a line like "hash filename"?

Yes. Only the first part of the line is used, so you can paste straight from a SHA256SUMS or .sha256 file.

Verify a File Checksum Online

Updated September 29, 2026 · By Saman

Projects that distribute installers, disk images or archives usually publish a checksum next to each download. Hashing the file you received and comparing it with that value proves the two are byte-for-byte identical: nothing was truncated, corrupted in transit or swapped along the way.

This page opens the Hash Generator on its File tab. The file is read and hashed inside your browser, never uploaded.

Recognising a checksum by its length

Hex characters	Algorithm	Typical file names
32	MD5	`MD5SUMS`, `.md5`
40	SHA-1	`SHA1SUMS`, `.sha1`
64	SHA-256	`SHA256SUMS`, `.sha256`
96	SHA-384	`.sha384`
128	SHA-512	`SHA512SUMS`, `.sha512`

What a checksum does and does not prove

A match proves the file equals the one that was hashed. It does not by itself prove who made it: if an attacker controls the download page, they can replace both file and checksum. That is why security-sensitive projects also sign their checksum files with GPG or publish them on a separate channel. For everyday downloads, matching a SHA-256 checksum from the official site is a strong and practical check.

Checking on the command line

Linux: sha256sum -c SHA256SUMS checks every file listed.
macOS: shasum -a 256 file.dmg and compare by eye.
Windows PowerShell: (Get-FileHash file.exe).Hash -eq 'EXPECTED' returns True or False.
Windows cmd: certutil -hashfile file.exe SHA256.

Tips

Copy the checksum rather than retyping it; one wrong character means no match.
Upper and lower case do not matter in hex; the comparison ignores case.
The browser limit here is 50 MB per file. For larger images, use the commands above.

Need a hash of text rather than a file? Use SHA-256, SHA-512 or MD5.

Guides

MD5 vs SHA-1 vs SHA-256: Which Hash Should You Use? Use SHA-256 for anything security-related; MD5 and SHA-1 are only acceptable where nobody gains anything by forging a matching hash.