File Checksum Verifier

✓ Link copied

Verify that a downloaded file is intact and untampered, entirely in your browser. Drag in any file and instantly get its SHA-256, SHA-1, and MD5 checksums, computed locally on your device with no upload. Paste the expected checksum a publisher provides — for an installer, ISO, release archive, or backup — and the tool tells you at a glance whether it matches, automatically detecting which algorithm you pasted. It tolerates colon- or space-separated digests and is case-insensitive, so you can paste a value in whatever format you copied it. Because nothing ever leaves your machine, it is safe for confidential files. Free, fast, and private.

Drag & drop a file to compute its checksum
or
Choose file

How to use

Drag and drop a file onto the dropzone (or click to choose one). The SHA-256, SHA-1, and MD5 checksums appear immediately, each with a one-click Copy button. To verify a download, paste the checksum the publisher listed into the Expected checksum box — the tool compares it against all three digests and shows a green Match (highlighting which algorithm matched) or a red No match. Click Choose another file to check a different one.

Frequently asked questions

Is my file uploaded anywhere?
No. The file is read and hashed entirely in your browser using the Web Crypto API and a local MD5 implementation. Nothing is ever sent to a server, logged, or stored, so it is safe to check confidential or sensitive files.
Which algorithm should I use to verify a download?
Use whichever the publisher provides — you don't have to choose in advance, since the tool computes all three and auto-detects which one your expected value matches. SHA-256 is the modern recommendation. SHA-1 and MD5 are still widely published for compatibility but are cryptographically broken, so a match confirms the file is unchanged from the listed value but should not be relied on against a determined attacker.
It says no match — what does that mean?
The file you loaded does not produce the checksum you pasted. That can mean the download was corrupted or incomplete, you copied the wrong or a partial value, or — in the worst case — the file was tampered with. Re-download from the original source and compare again. If the value isn't valid hexadecimal at all, the tool will tell you so you can recopy it.