Check that an installer or archive you downloaded is byte-for-byte what the publisher released. Pick a file, get its SHA-256 (or SHA-1, SHA-384, SHA-512) digest, and paste the published checksum to compare — case and spacing are ignored. The file is read inside your browser, which is the whole point: uploading it to a third party to verify it would defeat the exercise.
Runs entirely in your browser
When you download an installer or a disk image, the publisher often posts a checksum — a hash of the exact file they released. Computing the same hash on your copy and comparing the two tells you whether the file arrived byte-for-byte intact, catching both corrupted downloads and files that were tampered with in transit. This tool reads a file you select and produces its SHA-256 (or SHA-1, SHA-384, SHA-512) digest, then lets you paste the published value to compare — case and spacing are ignored.
Crucially, the file is read inside your browser and never uploaded. That is the entire point: sending a file to a third-party service to “verify” it would defeat the exercise and expose whatever the file contains. Here the hashing happens on your machine, so you can check private downloads with confidence.
A matching checksum is strong evidence the file is authentic and undamaged. A mismatch means something is wrong — re-download from the official source and check again, and be cautious if a file from an untrusted mirror repeatedly fails to match the publisher’s value.
TechToolsHQ is an independent, reader-supported tech platform. If this free tool saved you time, solved a problem, or helped your workflow, consider supporting our work. Your support helps us keep our utilities 100% free, private, and ad-free for everyone.