Checksum Verifier

How to use: step by step

1. 1
   Drop or select your file
   Drag a file into the drop zone or click to browse. Any file type and size is supported: processing is local.
2. 2
   Wait for hashes to compute
   MD5 is computed in pure JavaScript; SHA-1 / SHA-256 / SHA-512 use the browser's native Web Crypto API for maximum speed.
3. 3
   Copy any hash
   Each algorithm row has a Copy button. Use the hash that matches your download's published checksum.
4. 4
   Paste the expected checksum
   In the Verify panel, choose the algorithm and paste the expected hash from the software publisher.
5. 5
   Check the result
   A green 'Checksums match' or red 'Checksums do not match' indicator tells you instantly whether the file is intact.

Frequently Asked Questions

Is my file uploaded to a server?

No. Your file is read directly by the browser using the FileReader API. No network request is made: the file stays on your device.

Which hash should I use to verify a download?

Use whichever algorithm the publisher provides. SHA-256 is the modern standard. MD5 is still common for legacy software but is not collision-resistant.

What is the maximum file size?

There is no hard limit enforced by the tool. The browser processes the file in memory, so very large files (multi-gigabyte) may be slow depending on your hardware.

Why does the tool compute four hashes at once?

Computing all four simultaneously saves you from re-uploading if the publisher only provides one specific algorithm. The Web Crypto API calls are parallelised.

Why is MD5 included if it's weak?

MD5 is still used by many software publishers for checksum purposes (not security). Including it ensures you can verify any published checksum regardless of algorithm.

What does 'file integrity' mean?

It means the bits of the downloaded file are identical to the original. A matching checksum rules out corruption during download or transfer but does not prove the original file was safe.

Can I verify an ISO or disk image?

Yes. ISO files, disk images, ZIP archives: any binary file: can be dropped into the tool for checksum verification.

Is SHA-256 the same as SHA-2?

SHA-256 is one member of the SHA-2 family (which also includes SHA-384 and SHA-512). SHA-1 is a separate, older algorithm that is no longer considered secure for cryptographic purposes.

How do I verify a file checksum on Windows?

You can use this browser tool on Windows by dragging any file into the drop zone: no software installation needed. Alternatively, open PowerShell and run Get-FileHash filename.ext -Algorithm SHA256. Compare the output to the publisher's checksum to confirm the file is intact.

How do I check if a downloaded file has been tampered with?

Drop the downloaded file into this tool and compare the SHA-256 hash it produces against the checksum published on the official download page. If they match exactly (every character), the file is identical to what the publisher released. Any difference means the file was corrupted or altered.