OneTaskBy Tim King · Updated
Checksum Verifier
Check Files Against a SHA256SUMS or MD5SUMS List, Like sha256sum -c
OneTask is free, with no sign-up, and built by one person.
If this tool saved you time, a coffee helps keep new ones coming.
How the Checksum Verifier works
This checksum verifier does what sha256sum -c does in a terminal: paste the checksum list a project
publishes, drop in the files you downloaded, and each one is marked OK, FAILED or not listed. It handles
MD5, SHA-1, SHA-256, SHA-384 and SHA-512 lists.
How the checksum verifier matches files
A checksum list has one line per file. GNU tools write the hash, two spaces and the file name, with an
asterisk before the name in binary mode. BSD and macOS tools write SHA256 (name) = hash. The verifier
reads both, works out the algorithm from each hash's length and matches your files by name, ignoring any
folder path in the list.
Each dropped file is hashed in your browser and compared with its line. A FAILED result shows which algorithm was used so you can tell a corrupted download from a list meant for another version. Files not in the list are reported separately. Many projects sign the list itself with GPG, so check that signature too when one is published.
FAQ
What is the difference between SHA256SUMS and a .sha256 file?
A SHA256SUMS file lists every file in a release, one per line. A .sha256 file usually covers a single
download and may hold only the bare hash with no file name. Paste either here; for a bare hash, the file
hash checker is simpler.
Why does my file show as not listed?
The name of the file you dropped does not match any line in the list. Browsers sometimes add (1) to
repeated downloads, so rename the file back to the original name. The verifier ignores folders but the
file name itself must match exactly.
Can I check a whole ISO or release folder?
Yes. Select every file at once in the file picker or drop them together, and each gets its own result row. The files are read into memory one at a time, so very large images take a moment but are never uploaded.
See also: all Security & Identifiers tools, Dev Utilities, Formatters & Validators, Data & Encoding, SEO, Accessibility, AI.
Related tools
File Hash Checker
Hash a file and check it against the published checksum.
Hash Generator
Generate MD5, SHA-1, SHA-256 and SHA-512 digests from text.
CRC32 Calculator
CRC-32, CRC-32C and Adler-32 checksums of text or hex bytes.
Signature Verifier
Check whether a signature over a message matches a public key.
.env File Checker
Lint a .env file for syntax errors, duplicates and weak secrets.