File Checksum (SHA-256)
Software sites often publish a SHA-256 checksum next to a download. Choose the file here, paste the published value, and you will see straight away whether they match. The file is read locally and never uploaded. MD5 is not offered because browsers do not include it and it is no longer safe for verification.
Runs entirely in your browser. Your input and files are not uploaded to any server.
How to use
- Choose or drop a file (up to 1 GB).
- Wait for the checksums to be calculated.
- Paste the expected hash to compare it automatically.
Examples
Paste the SHA-256 from the vendor’s download page; a green match means the file is intact.
Hash both files and compare the SHA-256 values.
Privacy
Your files and text stay in your browser while you use this tool, and ads or anonymous visit statistics do not receive them. Only your favorites and recent tools are saved on your device. Privacy policy
Want proof? Check it with your browser’s Network tab: How to check that a tool does not upload your files
Frequently asked questions
Why is there no MD5?
The Web Crypto API in browsers does not implement MD5, and MD5 collisions are easy to create, so it cannot prove a file was not tampered with.
Is the file uploaded?
No. It is read into memory in this tab and hashed with crypto.subtle.
Why the 1 GB limit?
The browser hashing API needs the whole file in memory at once. Larger files may crash the tab on phones.