How to verify a SHA-256 checksum online

When a software download page lists a SHA-256 checksum, you can use this tool to verify the content was not tampered with in transit. Paste the text content, select SHA-256, and compare the output to the published checksum. If they match character-for-character, the data is intact. This guide shows how to verify a SHA-256 checksum in under 30 seconds without installing any software.

Step-by-step guide

1. Copy the content to hash: Paste the text, key, or token you want to fingerprint. For file verification, open the file in a text editor and copy its full content.
2. Select SHA-256 and hex encoding: SHA-256 with hex output is the most common checksum format. If the published hash is base64-encoded, switch the encoding selector to base64.
3. Compare the digest: The hash appears instantly. Compare it character-for-character with the published checksum. A single character difference means the content differs from the expected input.

Frequently asked questions

Why does my hash differ from the published one?

The most common cause is trailing whitespace or a newline at the end of the input. Paste the exact string with no leading or trailing spaces, and the hashes will match.

Can I verify a binary file's checksum here?

Only for text files. For binary files use your OS: sha256sum filename on macOS or Linux, or Get-FileHash filename -Algorithm SHA256 on Windows PowerShell.