Practical guide
How to verify a file with a SHA-256 hash
A cryptographic hash is a fingerprint calculated from every byte in a file.
Published and reviewed
Obtain a trusted reference
The software publisher or file owner should provide a SHA-256 value through a trusted channel. A hash copied from the same compromised download location may not provide meaningful assurance.
Calculate the local hash
Open File Hash Generator, select the downloaded file, choose SHA-256 and generate the result. Compare every character with the trusted reference value.
Interpret the result
A matching SHA-256 value strongly indicates that the bytes are identical to the referenced file. A mismatch means the file differs and should be investigated or downloaded again.
Know the limit
A correct hash does not prove that software is safe. It only verifies equality with the reference file, so source reputation, code signing and malware controls still matter.