Calculate a file's MD5, SHA-1, SHA-256 or SHA-512 hash to confirm a download was not corrupted or tampered with, by comparing the result against the hash the source published. The file is read locally in your browser and never uploaded; SHA-256 is the modern default, while MD5 and SHA-1 remain useful only for basic integrity checks.
What is a file hash?
A hash (or checksum) is a short fixed-length fingerprint calculated from a file's exact bytes. Change a single bit and the hash changes completely, so it's the standard way to confirm a download wasn't corrupted or tampered with: compare the hash you compute here against the one published by the source. SHA-256 is the modern default; MD5 and SHA-1 are still common for basic integrity checks even though they're no longer considered secure against deliberate tampering.
How to Calculate a File Hash
- Choose a file — drag it onto the drop area or click to select it.
- Pick algorithms — check the ones you need from MD5, SHA-1, SHA-256, and SHA-512 (you can select several at once).
- (Optional) Verify — paste the value published by the source into the "Expected hash" box to compare automatically.
- See the results — the computed hashes appear, and any algorithm matching the expected hash is highlighted in green.
Which hash algorithm should I choose?
As a rule, pick the same algorithm as the checksum published by the source. If you have a choice, SHA-256 is the current standard default for both integrity and security. MD5 and SHA-1 are fast to compute and still offered by many publishers, so they're fine for a simple corruption check, but use SHA-256 or stronger when the goal is tamper resistance. You can also check several algorithms at once to see them together.
How do I verify a downloaded file?
Add the file you downloaded to this tool, then paste the checksum published by the source (official site, release notes, etc.) into the "Expected hash" box. If the values match, that algorithm is shown in green, confirming the file wasn't corrupted or tampered with. If they don't match, it's best to download again or check a different source.
Is MD5 secure?
It's still usable for integrity checks, but it isn't secure for security purposes. MD5 allows deliberate collisions where two different inputs share the same hash, so it can't be trusted to prevent malicious tampering. It's fine for quickly checking for corruption in transit, but use SHA-256 or stronger when tamper resistance matters.
Is my file uploaded anywhere?
No. Hashing happens entirely inside your browser — SHA hashes use the built-in Web Crypto API and MD5 uses a small self-hosted library, so your file is never sent to or stored on any server. To verify a download, paste the publisher's checksum into the "Expected hash" box and the matching algorithm will be highlighted in green.