EEvlarSoft
Sign inSign up free

File Hash Validator

Paste the code printed under a download, drop the file you got, and see at once whether the two match, without knowing or choosing the hash type.

Buy for $1.99
One payment. No subscription.
14-day money-back guarantee.
Paste what the download page gave you. That is the whole job.
It works out which algorithm from what you pasted.
Match, in plain words — the file is what was published.
A mismatch shows what your file actually hashes to.
A whole batch at once, and nothing ever leaves your PC unless you choose to send feedback.

Paste what the download page gave you. That is the whole job.

190,000+downloads of EvlarSoft apps
Signed by EvlarSoftVerified US publisher
14-day money-backNo questions asked
Updates includedNo upgrade fees
Real supportEmail the developers

See it in action

It works out which algorithm from what you pasted.
It works out which algorithm from what you pasted.
Match, in plain words — the file is what was published.
Match, in plain words — the file is what was published.
A mismatch shows what your file actually hashes to.
A mismatch shows what your file actually hashes to.
A whole batch at once, and nothing ever leaves your PC unless you choose to send feedback.
A whole batch at once, and nothing ever leaves your PC unless you choose to send feedback.

A hash checker that compares for you

A hash checker answers one question: is the file on your disk the one the publisher meant you to have? Download pages print a checksum under an ISO, a firmware image or an installer for this reason, but Windows leaves the comparing to you. You run certutil or Get-FileHash, then hold a 64-character string next to another one and squint.

File Hash Validator does the comparison. Paste the published value into the box at the top, add the file, and press Check. A badge beside the box names the algorithm as soon as you paste, worked out from the length: CRC32, MD5, SHA-1, SHA-256 or SHA-512. There is no menu to set and so no way to compare an MD5 against a SHA-256 by mistake.

A file that matches is marked as done. One that does not is marked as failed, and the app shows the value the file really has next to the one it should have had.

How to verify a checksum on Windows

  • Copy the checksum from the download page. If it is already on your clipboard when the app opens, a button offers Use the SHA-256 on the clipboard (or whichever type it is).
  • Otherwise paste it into Paste the checksum from the download page. Capitals, spaces between groups, a leading 0x or a file name after the digest are all fine.
  • Click Choose a file, or drag the download onto the window.
  • Click Check. The result appears on the file's row, and its menu has Copy what this file actually is for a mismatch you want to report.

Check many downloads against a SHA256SUMS file

Projects that ship several files often publish one list instead of a checksum per file. Drop that list, a SHA256SUMS, a .sha256 or an .md5 file, into the window along with the downloads. The app reads it, says how many checksums it found, takes the list out of the queue and matches each download against the line with its name. Lines in the BSD style, SHA256 (file.iso) = followed by the digest, are read as well.

Files without a line of their own are checked against whatever is in the top box. And any single file can take its own value: select it and paste into This file's own checksum.

What a checksum mismatch means

A mismatch only tells you the bytes differ. The usual causes are dull: a download that stopped early, a file from a newer release than the checksum on the page, or the wrong file picked from a folder full of similar names. Compare the actual value the app shows against other checksums on the page before assuming the worst, then download again from the official source.

A match means the file is exactly what that checksum describes. It says nothing about whether the publisher is trustworthy, so take the checksum from the publisher's own site rather than from a mirror.

Features

  • Recognizes CRC32, MD5, SHA-1, SHA-256 and SHA-512 by length
  • Live badge names the algorithm while you paste
  • Cleans up pasted valuesCase, spacing, 0x prefixes, trailing names
  • Offers a checksum it finds on the clipboard at startup
  • Reads SHA256SUMS, .sha256 and .md5 lists and matches by file name
  • Per-file checksum box for mixed batches
  • Shows the real value of any file that fails
  • Check stays disabled until a file has something to match
  • Reads files in chunks, so large ISO images are fine

What's new in 2.0.4

  • You no longer have to say which algorithm the checksum is. The app works it out from what you pasted, across MD5, SHA-1, SHA-256, SHA-512 and CRC32
  • Spacing, capitals and a leading 0x are all accepted, so a checksum copied from anywhere works without being tidied up first
  • Now checks a whole batch, each file against its own checksum, instead of one file per run
  • A mismatch now shows what the file actually hashes to, rather than only that it failed
  • Files are read in a stream, so an ISO or an installer no longer depends on how much memory is free
  • Drag and drop from Explorer, and a right-click selection of many files opens one window instead of one each
  • A redesigned interface, in light or dark, and it can follow Windows instead if you prefer

Questions

Anything else? Ask us

Do I need to know whether the checksum is MD5 or SHA-256?

No. The app works out the algorithm from the length of what you paste: 8 characters is CRC32, 32 is MD5, 40 is SHA-1, 64 is SHA-256 and 128 is SHA-512. There is no algorithm menu.

Which hash types does it support?

CRC32, MD5, SHA-1, SHA-256 and SHA-512. SHA-384, SHA-3 and BLAKE checksums are not recognized.

Can I paste a checksum exactly as it appears on the download page?

Yes. Capitals, spaces between groups, a leading 0x and a file name printed beside the digest are all ignored, so a line copied from sha256sum or certutil output works too. If a checksum is already on the clipboard when the app starts, it offers to use it.

Can it check several files against a SHA256SUMS file?

Yes. Drop the checksum file, such as SHA256SUMS or a .sha256 or .md5 file, along with the downloads, and each file is checked against the line that names it. You can also paste a separate checksum for any single file in the list.

What happens when a file does not match?

It is marked as failed and the app shows the checksum the file actually has, which you can copy from the file's menu. A mismatch means the file is not the one the checksum describes, for example an unfinished download or a different file.

Can it create a checksum for a file that has none?

No. It only checks files against a checksum you provide, and the Check button stays unavailable until at least one file has one. It reads the file and never changes, renames or moves it.

Is checking the hash enough to know a file is safe?

It proves the file is the one the checksum was made from, nothing more. If the checksum came from the same compromised page as the file, both could be wrong, so get it from the official site.

Why does the badge say not a checksum?

What you pasted is not 8, 32, 40, 64 or 128 hex characters once spaces and other extras are removed. Check that the whole value was copied.

Which versions of Windows does it run on?

Windows 10 (version 1809 or later) and Windows 11.

Is it a subscription?

No. File Hash Validator is a one-time purchase of $1.99, and updates are included.

How do I get it?

Buy it on this page and your license key arrives by email. If the button says Notify me, File Hash Validator is not on sale here yet; leave your email and we will tell you when it is.

More from EvlarSoft

Any File Splitter

Files and disks

Split any file into pieces of the size you actually need. Pick the limit you are up against — 25 MB for an email, 700 MB for a disc, 4 GB for a FAT32 drive — instead of guessing how many pieces that works out to. Drop the parts back in later and it joins them into the original, byte for byte, without being told which job it is doing. A whole batch at a time, entirely on your PC.

$2.99 · lifetime 3.0

File Shredder

Security and privacy

Delete a file properly. An ordinary delete only forgets where the file was — the contents sit on the disk until something else happens to need the space, which is why recovery tools work. This writes over the contents first, then strips the name, then deletes it. One button and nothing to decide: drop files or a whole folder in, confirm once, and it is done. Entirely on your PC.

$1.99 · lifetime 4.0

Batch File Mover

Files and disks

Find the files you want by name, contents, kind, date or size, then move, copy or recycle all of them in one go. Save a search as a rule that keeps a folder tidy by itself, even with the window closed, and undo the last move with one click.

$1.99 · lifetime 3.0