Check File Integrity with SHA-256
Before installing software or opening a downloaded file, verify its SHA-256 hash to confirm it matches the original. This tool calculates SHA-256, SHA-1 and SHA-512 checksums entirely in your browser.
Why use this?
- Verify downloads haven't been tampered with
- Check file integrity after transfers
- Supports SHA-256, SHA-1 and SHA-512
- Also available as a server API for CI/CD pipelines
How to use a checksum
Software publishers often list a SHA-256 hash next to their download link. After downloading, run the file through this tool and compare the result character by character — even a single differing character means the file was altered or corrupted, and shouldn't be trusted.
Why this matters
A mismatched hash can mean a corrupted download, a man-in-the-middle tampering during transfer, or — in rarer cases — a compromised mirror serving malware disguised as legitimate software. Checking the hash before running an installer is one of the simplest ways to catch this.
FAQ
Which algorithm should I use?
Use whichever the publisher provides. SHA-256 is the current standard for most software; SHA-1 is older and considered weak for security purposes but still used for basic integrity checks.
Is my file uploaded to check the hash?
No. The hash is calculated entirely in your browser using the Web Crypto API — the file itself is never transmitted.
Can I check very large files?
Yes, files are processed in chunks locally, so there's no practical size limit beyond your device's available memory.