Verification

File Checksum & Hash Calculator

Calculate MD5, SHA-1, SHA-256, and SHA-512 hashes of any file or text right in your browser — nothing is uploaded. Paste an expected checksum to verify a download in one click.

Drop a file here, or click to choose — it stays on your device

— or hash some text —

AlgorithmHash
MD5
SHA-1
SHA-256
SHA-512

What is a checksum?

A checksum (or hash) is a short fingerprint computed from the bytes of a file. Run the same file through the same algorithm and you always get the same value; change a single byte and the value changes completely. Open-source projects publish a checksum next to each download so you can confirm the file you received is byte-for-byte identical to the one they released — catching both accidental corruption and tampering.

How to verify a download

  1. Download the file and find its published checksum (often in a SHA256SUMS file or on the project's download page).
  2. Choose the downloaded file above. Your browser computes MD5, SHA-1, SHA-256 and SHA-512 locally — the file is never uploaded.
  3. Paste the published value into Expected checksum. A green match means the file is intact; a red mismatch means you should re-download and not run it.

Verifying our own open-source download mirrors? Every file we mirror lists its SHA-256 sum — paste it here to confirm your copy.

Frequently asked questions

Are my files uploaded anywhere?

No. All hashing happens locally in your browser using the Web Crypto API. The file you choose never leaves your device and is never sent to our servers.

Which hash algorithms are supported?

MD5, SHA-1, SHA-256, and SHA-512. SHA-256 is the algorithm published alongside most open-source downloads and is the recommended choice for verifying integrity.

How do I verify a download with a checksum?

Choose the downloaded file, then paste the checksum published by the project into the "Expected checksum" box. If the computed hash matches, the tool shows a green match and you can trust the file is intact.

Is MD5 safe to use?

MD5 is fine for detecting accidental corruption but is cryptographically broken and should not be relied on against a deliberate attacker. Prefer SHA-256 for security-sensitive verification.

More tools

Bandwidth

Download Time Calculator

Estimate transfer time from a file size and your connection speed.

Units

File Size Converter

Convert between B, KB, MB, GB, TB and binary KiB / MiB / GiB units.

Encoding

Base64 Encoder / Decoder

Encode text to Base64 or decode it back, with full UTF-8 support.

Encoding

URL Encoder / Decoder

Percent-encode text for URLs, or decode an encoded URL back to text.

Format

JSON Formatter / Validator

Pretty-print, validate, or minify JSON. Clear error messages.

Generate

QR Code Generator

Make a QR code from any text or link; download as PNG or SVG.