SECURITY · PRIVATE

File Checksum Verifier

Upload any file to instantly compute its SHA-256, SHA-1, SHA-512 and MD5 checksums. Everything runs locally — your file never leaves your browser.

Upload File

Drop any file here or click to browse

All formats supported · No size limit (processing in your browser)

What is a File Checksum?

A file checksum is a fixed-length hash (such as SHA-256 or MD5) computed from a file's contents. It serves as a fingerprint — if even a single byte changes, the checksum changes completely. Checksums are used to verify that a downloaded file has not been corrupted or tampered with by comparing it to the checksum published by the file's source.

This tool computes SHA-256, SHA-512, SHA-1, and MD5 checksums from any file without sending the file to any server.

How to verify a file checksum online

  1. Click Choose file or drag your file into the upload area.
  2. The tool computes all four checksums instantly in your browser.
  3. Compare the SHA-256 (or MD5) hash to the one published by the file's source.
  4. If they match, the file is intact. If they differ, do not use the file.

Frequently Asked Questions

Which checksum algorithm should I use?

SHA-256 is the recommended algorithm for file integrity verification today. MD5 and SHA-1 are still widely published alongside downloads but are not secure against intentional tampering.

Can this tool verify a file was not tampered with?

A checksum can detect accidental corruption (download errors, disk errors) reliably. To detect intentional tampering, the checksum itself must be signed with a digital signature from a trusted party.

Does the file get uploaded when I check its checksum?

No. The checksum is computed entirely in your browser using the Web Crypto API (FileReader and SubtleCrypto). Your file never leaves your device.

What is the difference between a checksum and a hash?

In practice, the terms are used interchangeably for file verification. Strictly speaking, a checksum (like CRC32) is optimised for error detection; a cryptographic hash (SHA-256) is designed to resist intentional collisions as well.