Verify a download with SHA-256 checksums
Compare a publisher’s hash with a local SHA-256 digest to check integrity after you download a file.
Why checksums exist
A checksum is a fingerprint of file bytes. If even one byte changes, the hash changes. Matching the publisher’s SHA-256 value suggests the file you have matches the file they published.
What it does not prove
A matching hash does not prove the publisher is trustworthy—only that your copy matches theirs. Get hashes from an HTTPS page you trust, not from a random mirror forum post alone.
Local hashing
Hash the file in your browser with our SHA-256 tool so the file never uploads. Compare the hex digests character for character.
Try related tools
- SHA-256 hash — Fingerprint text or files locally with SHA-256.