Calculate MD5, SHA-1, SHA-256, and SHA-512 checksums of any file and verify it against a published hash to confirm the download is authentic and untampered. Runs entirely in your browser.
Choose a file
Calculate and verify a file's MD5, SHA-1, SHA-256, and SHA-512 checksum to confirm a download is authentic and untampered. Runs entirely in your browser.
A checksum is a fingerprint of a file produced by a hash function. If even one byte of the file changes, the checksum changes completely - so comparing a file's checksum against the value published by its author proves the download arrived intact and was not corrupted or tampered with. This tool computes MD5, SHA-1, SHA-256, and SHA-512 for any file and lets you paste a published hash to verify it in one step. The file is streamed and hashed locally - it is never uploaded.
Input:
ubuntu-24.04.iso + published SHA-256
Output:
SHA-256 matches - file verified
Is my file uploaded to a server?
No. The file is read and hashed entirely in your browser using WebAssembly; it never leaves your device, which also means there is no upload size limit beyond your machine's memory.
How do I verify a downloaded file?
Calculate the file's checksum here, then compare it to the hash the publisher lists (often labelled MD5SUM, SHA256SUM, or in a CHECKSUMS/SHASUMS file). If they match, the download is intact. You can also paste the published hash into the verify box to compare automatically.
Which algorithm should I use?
Use SHA-256 for security and integrity. MD5 and SHA-1 are cryptographically broken and should only be used to match an older published checksum, not to detect deliberate tampering.
Can it handle large files?
Yes. The file is streamed in chunks rather than loaded all at once, so large ISOs and archives hash without running out of memory.
