File Checksum Verifier (SHA-1, SHA-256, SHA-512)
Drop in a file to compute its SHA-1, SHA-256 and SHA-512 checksums, then paste the value a publisher listed to confirm your copy is genuine. The expected box turns green on a match and red on a mismatch, comparing case-insensitively so a hash pasted from a .sha256 file still lines up. Everything runs in your browser with the Web Crypto API, so the file never leaves your device.
How to verify a file checksum
- Drag a file onto the box, or click to choose one.
- Read its SHA-1, SHA-256 and SHA-512 digests and copy any of them.
- Paste the publisher's checksum into the expected box and watch it turn green for a match or red for a mismatch.
Examples
Verifying a file whose only content is the bytes for 'abc'
expected SHA-256: ba7816bf8f01cfea414140de5dae2223b00361a396177a9cb410ff61f20015ad
Match: the computed SHA-256 equals the expected value
SHA-256 of an empty (zero-byte) file
a 0-byte file
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Frequently asked questions
Is my file uploaded anywhere?
No. The checksum is computed entirely in your browser with the Web Crypto API. The file is read locally as an ArrayBuffer and its contents never leave your browser, are never sent to a server, and are not logged. Once the page has loaded you can even verify files offline.
What is a checksum and why verify one?
A checksum is a fixed-length cryptographic fingerprint of a file's exact bytes. Publishers list a checksum next to a download so you can confirm the file you received is bit-for-bit identical to the one they released. Verifying it catches a corrupted, truncated, or tampered download, because changing even a single byte produces a completely different checksum.
How does the expected box decide match or mismatch?
Paste the checksum the publisher provided and the tool compares it against the digests it just computed. The comparison is case-insensitive and ignores surrounding spaces or a trailing newline, so a value copied straight from a .sha256 or .sha512 file works. A green state means the values are identical; red means they differ, so the file is not the one you expected.
Do I have to pick the algorithm first?
No. The tool shows SHA-1, SHA-256 and SHA-512 at once and matches your pasted value against all of them, so it lights up the row whose digest equals the expected checksum. That also tells you which algorithm the publisher used.
Which algorithm should I trust?
SHA-256 is the common default and what most projects publish, with SHA-512 giving an even wider security margin. SHA-1 is shown because some older releases still list it, but it is considered weak for security and should only be used as a basic corruption check, not to prove authenticity.
Why is there no MD5 option?
The browser Web Crypto API does not expose MD5, and MD5 is cryptographically broken, so a matching MD5 no longer proves a file is untampered. For integrity and authenticity, verify against SHA-256 or stronger.
Can it verify large files?
The whole file is read into memory and then hashed, so very large files are limited by your device's available memory and may take a moment. For typical downloads, archives and installers, verification is effectively instant.
Related tools
File Hash Generator
Drop in a file to get its SHA-1, SHA-256, SHA-384 and SHA-512 checksums. Compare against an expected hash. Runs in your browser, the file never uploads.
SRI Hash Generator
Generate a Subresource Integrity hash and a ready-to-paste script or link tag from your asset contents. Hashed in your browser, nothing is uploaded.
CRC32 Calculator
Calculate the CRC32 (IEEE 802.3) and Adler-32 checksum of any text. Live hex and decimal output that runs entirely in your browser.
Base64 File Encoder
Encode any file to Base64 and a data URI in your browser. Drop a file to get the raw Base64 and a ready data: URI to copy. Nothing is uploaded.
CBOR Decoder
Decode a CBOR file (RFC 8949) to readable JSON in your browser. Handles integers, byte strings, arrays, maps, tags, and floats. Nothing is uploaded.
CSV File Inspector
Inspect a CSV file in your browser: detect the delimiter, encoding and BOM, count rows and columns, guess the header, and preview sample rows. Private.