SHA-256 file checksum
Verify a download by hashing the exact bytes on your device. Matching a trusted publisher digest checks integrity — not malware safety.
Integrity vs safety
A matching SHA-256 digest means your file bytes agree with the reference string you compared. It does not scan for malware and does not prove the publisher’s site was honest. Always obtain expected digests from the vendor’s HTTPS page or signed channel.
Steps
- Open Hash Generator and choose file mode.
- Select SHA-256 (or SHA-512 when the publisher lists it).
- Hash the artifact you will install — not a renamed copy with a different newline.
- Compare the hex digest to the publisher string, ignoring presentation case.
Text mode pitfalls
Hashing pasted text can disagree with a file hash when editors add a trailing newline or BOM. Prefer file mode for release artifacts. MD5/SHA-1 remain useful only for legacy published digests. See also verify a download checksum.