CraftTools

File Hash Compare

Guide: How to Check a Download With a Checksum (and Why It Matters)

Choose a file and paste the checksum to check it.

Use the same type of hash as the one on the download page, and SHA-256 if you have the choice, because MD5 and SHA-1 can be faked. If the result doesn't match, download the file again from the official site. Files are read in your browser and never uploaded.

Nothing you enter or choose here leaves your device. This tool runs in your browser.

How to use

  1. 1Choose the hash type that matches the checksum you were given.
  2. 2Choose your file, and paste the checksum or choose a second file.
  3. 3Read the result: a match means the files are identical.

Frequently asked questions

Are my files uploaded?

No. Everything happens in your browser, and nothing is sent to us.

What is a checksum?

A short fingerprint worked out from a file's contents. Change one byte of the file and the fingerprint is completely different, so a match shows the file is unchanged.

Which hash type should I use?

The one the download page lists, usually SHA-256. If you can choose, use SHA-256 or SHA-512, because MD5 and SHA-1 can be faked on purpose.

What if it doesn't match?

Download the file again from the official site and compare again. If it still doesn't match, don't open it.

Is there a size limit?

Files up to 500 MB, because the whole file is read into memory in your browser.

Read the guide

Learn how this works and how to get the most from it.

Security

How to Check a Download With a Checksum (and Why It Matters)

What a checksum is, how to compare a file against the one on a download page, which hash to trust, and what to do if the result doesn't match.

2 min read

Hash Generator

Generate MD5, SHA-1, SHA-256 and SHA-512 hashes and HMACs.

Bcrypt Hash Generator & Checker

Generate bcrypt password hashes and check a password against a hash.

AES Encrypt & Decrypt

Lock text or files with a password, right in your browser.

Base64 & URL Encoder / Decoder

Encode and decode Base64 and URL-encoded text instantly.