Verify a SHA-256 checksum
Many download pages publish a SHA-256 checksum next to the file. Paste that checksum, add the file you downloaded, and this tool tells you whether they match. A match means the file is exactly the one the publisher made available.
Your files stay on your device. They are processed in your browser and not uploaded.
How to use it
- Paste the expected SHA-256 checksum from the download page.
- Drop the downloaded file on the box, or choose it from your device.
- Read the result: it says whether the file matches the expected checksum.
Questions and answers
Where do I find the expected checksum?
On the page you downloaded the file from, usually next to the download link or in a file named SHA256SUMS or ending in .sha256.
What does it mean if the checksums do not match?
The file is different from the one the publisher described. The download may be incomplete, you may have a different version, or the file may have been changed. Download it again from the official source.
Is my file uploaded?
No. Your browser reads the file and calculates the checksum on your device. The file is not uploaded.
Can I paste a whole line from a SHA256SUMS file?
Yes. The tool picks out the 64-character checksum and ignores the file name next to it.
Does it work offline?
Yes, after you have used it once: your browser keeps a copy of the tool, so it also works without an internet connection. Your files are never part of that copy.