Pick a local file to compute its SHA-1/256/384/512 hash entirely in your browser — nothing is uploaded. Optionally paste an expected checksum to verify a download wasn't corrupted or tampered with.
Verify that a downloaded file is intact and untampered: pick the file, choose SHA-256 (or SHA-1/384/512), and compare the computed hash against the checksum published by the download page. A match means the bytes are exactly what the publisher shipped.
The file is hashed locally with the Web Crypto API and never uploaded — so it works for multi-gigabyte ISOs and private files alike.
No. Hashing streams the file through your browser's crypto API; nothing leaves your device.
The file differs from the original — a corrupted download, a different version, or tampering. Download it again from the official source.
MD5 is cryptographically broken. If a site only publishes MD5, the check still catches accidental corruption — use your OS's md5 tool for that.
Free, private, no account. Like every DevForge tool, this one runs in your browser and never uploads your files. See all 35 free tools or join the DevForge community to share your own games, tools and assets.