Only Trusted File Hash Checker
v1A file in, its hashes out.
Free · No uploads · On-deviceDrop a file here, or click to choose
Any file, any size your browser can read. You can also paste (Ctrl+V) a file straight in.
No file yet. Checked on this device. Uploaded: 0.
How it works
Read, hash, compare
A hash is a fingerprint of a file's exact bytes. Change one byte and the hash changes completely. This tool reads your file in the browser and runs it through Web Crypto four times, once per algorithm, then shows all four fingerprints. Compare any of them with the hash the publisher lists: if they match character for character, the file is byte-identical to the publisher's.
SHA-1 is shown for legacy checksum lists only. It is broken for security, so never use it to prove a file is safe. The file is read into memory for hashing, so multi-gigabyte files can be slow.
Guide
Three jobs for a hash
- Verify a download: the publisher lists a SHA-256 next to the download. Hash your copy here. A match means the download arrived intact.
- Prove a file did not change: hash it now, hash it again later. Same hash means same bytes, even if the name or date changed.
- Confirm identity without sending the file: send someone the hash, not the file. They can check their own copy against it.
Questions
Why four hashes?
Publishers list different ones. SHA-256 is the common standard. SHA-512 is stronger. SHA-384 sits between them. SHA-1 is legacy only: it is broken for security, so use it only to match an old checksum list, never to prove a file is safe.
Why is there no MD5?
Browsers do not offer MD5 through Web Crypto, and MD5 is broken for security anyway. If a download page lists only an MD5, look for a SHA-256 on the same page. If there is none, use a desktop hashing tool for the MD5.
Is the file uploaded?
No. Hashing runs in your browser with Web Crypto. The file is read on your device and never sent anywhere. The page shows Uploaded: 0 throughout.
What if the hash does not match the publisher's?
The file is not the one the publisher hashed. It may be corrupt, incomplete, or a different version, or the download may have been tampered with. Do not trust it. Download it again from the publisher's own site and check once more.