Free security tool · Private
Make sure a download is the real thing.
Drop in an installer or any file to get its fingerprint (checksum), then paste the one from the maker's website to see if they match.
Good to know
Questions people ask
What is a checksum?
A checksum (or hash) is a fingerprint of a file. Change one letter in the file and the fingerprint changes completely. Software makers publish it so you can confirm your download is the real, untouched file.
Is my file uploaded?
No. The fingerprint is worked out inside your browser, on your own device. That works for large files too, like installers and disk images.
Which one should I use?
Use whichever the software maker lists, usually SHA-256. MD5 and SHA-1 are older and can be faked on purpose, so trust a match only for spotting broken downloads.
What if the checksums don't match?
Don't open or install the file. Delete it and download it again from the maker's official site. If it still doesn't match, the file may have been tampered with. Call us before you run it.
Not sure what your team is installing?
We manage software updates and block risky downloads, so nobody installs a fake app by mistake.
More free tools: see them all