Which algorithm should I use?

Whichever one the publisher listed — a checksum is only meaningful against the value it's being compared to. If you have a choice, SHA-256. MD5 and SHA-1 can both be deliberately collided, so a matching MD5 proves the file wasn't corrupted but not that nobody tampered with it.

Does a matching checksum mean the file is safe?

It means the file is identical to what the publisher released. Whether what they released is trustworthy is a separate question — a checksum verifies integrity, not intent. It also proves nothing if you took the checksum from the same page an attacker could have altered.

No. The bytes are read in your browser and hashed using the browser's own Web Crypto implementation. Nothing is sent anywhere, which is what makes it reasonable to check a private file here.

Checksum Generator

When a project publishes a checksum next to a download, it is telling you exactly what the file should be, byte for byte. This works out your copy's checksum and compares it. A mismatch means the file you have is not the file they released — usually a download that broke halfway, occasionally something worse. Paste the published value in and you get a plain yes or no.

Drop the files you want to checkor click to browse — the file is read on your device, never uploaded

Nothing is uploaded — this tool runs inside your browser, so your files never leave your device.

Help us improve

Why use this tool

SHA-256, SHA-1 and MD5
Paste the expected value and get a direct match or no-match answer
Several files at once
Uses your browser's native crypto — fast, and the file is never uploaded

How it works

1Drop in the file you downloaded.
2Pick the algorithm the publisher used — usually SHA-256.
3Paste their published checksum to compare, or just copy yours.

Checksum Generator — frequently asked questions

Download the file again, from the official source, and check it a second time. Interrupted or resumed downloads are by far the most common cause. If a fresh download still doesn't match the value on the project's own site, do not run the file — that is exactly the situation checksums exist to catch.

More file tools

Create ZIP Extract ZIP Find Duplicates File Info

Explore the other tools

Same deal everywhere on the site — free, no sign-up, and no watermark on anything you download.

QR Code Tools Barcode Tools PDF Tools Image Tools Developer Tools SEO Tools Text Tools Calculators Unit Converters Color Tools Business Tools AI Tools Utilities

Or see every tool on one page.