SHA-256 File Checker

Calculate a downloaded file’s SHA-256 and compare it with the value published for that exact file. The browser checker processes files locally and supports files up to 128 MiB.

Compare a file with the publisher’s SHA-256

The checker calculates a hash in your browser. It does not upload the selected file or submit its filename or hash. Use files up to 128 MiB; for larger files, use the commands below.

A SHA-256 value has 64 hexadecimal characters. Compare the exact release, platform and filename from a trusted publisher source.

Choose a file to begin.

What does a matching checksum mean?

A matching SHA-256 tells you that the file’s bytes match the expected hash. Get that expected value from a trusted publisher source, and match the version, platform and filename. A hash copied from the same untrusted download site does not provide an independent check. A matching checksum is not a malware scan or a guarantee that software is safe.

Check larger files on your computer

Open a terminal in the folder containing the downloaded file. Replace installer.exe with the actual filename, keeping quotation marks around paths with spaces.

Windows PowerShell

Get-FileHash -LiteralPath ".\installer.exe" -Algorithm SHA256

macOS Terminal

shasum -a 256 "installer.dmg"

Linux terminal

sha256sum "installer.AppImage"

Where can I find the expected value?

Look on the publisher’s release page for a SHA-256 value or a signed checksum file. Some publishers do not provide one. Softwares Academy shows publisher checksums where available on its software entries; use the source-check date and the exact filename. See how our source checks work, or browse the software catalogue.

Privacy and limitations

This checker does not upload the selected file or submit its filename or hash. It uses the browser’s built-in SHA-256 implementation and reads the selected file into memory. The size limit helps avoid excessive memory use. Website analytics and advertising are described in our privacy policy. Clear the checker when you finish using a shared computer.

Check a Windows digital signature separately

A file hash does not identify the certificate used to sign an installer. Follow our Windows digital-signature guide to read the status and publisher without launching the downloaded file.

Technical reference

The calculation uses the Web Crypto digest API. This tool compares a supplied hash and does not scan files for malware, verify a digital signature or assess the software publisher.