What does a matching checksum prove?
It shows that the calculated file hash matches the supplied value. The expected checksum must still come from a trusted source.
Security
Checksum Verifier
Verify whether a local file matches an expected MD5, SHA-1, SHA-256, SHA-384 or SHA-512 checksum.
Tool
Checksum Verifier
Verify whether a local file matches an expected MD5, SHA-1, SHA-256, SHA-384 or SHA-512 checksum.
This tool runs in your browser. Your input is processed locally and is not uploaded.
About this Tool
Use this checksum verifier to confirm that a downloaded, copied or transferred file matches a checksum published by a trusted source. Select the correct algorithm, enter the expected value and choose the local file. MD5 and SHA-1 are included only for legacy compatibility and are not suitable for adversarial integrity or authenticity checks.
Examples
- Verify a SHA-256 checksum
- Check a downloaded ISO file
- Compare a file with a release digest
Frequently Asked Questions
Does a mismatch always mean the file is malicious?
No. A mismatch only shows that the file content differs. The cause may be corruption, a different version or unauthorized modification.
Are uppercase and lowercase checksum values different?
Hexadecimal checksum comparisons should normally be case-insensitive after whitespace and separators are normalized.