Learn how to calculate and verify MD5, SHA-1, SHA-256, and advanced cryptographic checksums natively in Windows using PowerShell, Command Prompt, or our client-side Web Crypto tool.
Need a quick verify right now? Drop any file into the zone below to compute its SHA-256 and SHA-1 checksums instantly in your browser using the local Web Crypto API with zero server uploads.
A checksum (or cryptographic hash) is a fixed-length string of hexadecimal characters generated by passing a file through a mathematical algorithm (such as SHA-256 or MD5). Even a single byte change in the file alters the resulting hash completely.
Confirms your downloaded ISO, ZIP, or installer wasn't corrupted during transfer.
Verifies the executable hasn't been maliciously altered or injected with malware.
Allows matching your local file hash directly against official vendor release notes.
PowerShell includes a native cmdlet called Get-FileHash. It works out-of-the-box on Windows 10 and 11 without requiring administrator privileges or third-party software.
Get-FileHash "C:\Path\To\YourFile.exe"Pass the -Algorithm parameter to specify the exact hashing algorithm requested by the developer:
# Calculate MD5
Get-FileHash "C:\Path\To\YourFile.iso" -Algorithm MD5
# Calculate SHA384
Get-FileHash "C:\Path\To\YourFile.zip" -Algorithm SHA384
# Calculate SHA512
Get-FileHash "C:\Path\To\YourFile.zip" -Algorithm SHA512Automatically test whether your calculated file hash matches the vendor's provided checksum string:
(Get-FileHash "C:\Path\To\YourFile.exe" -Algorithm SHA256).Hash -eq "EXPECTED_HASH_HERE"If the result prints True, your file is 100% genuine and uncorrupted. If it prints False, the file has been altered or corrupted.
If you prefer standard Command Prompt (cmd.exe), Windows includes a built-in utility called CertUtil.
certutil -hashfile "C:\Path\To\YourFile.exe" SHA256# Calculate MD5
certutil -hashfile "C:\Path\To\YourFile.exe" MD5
# Calculate SHA512
certutil -hashfile "C:\Path\To\YourFile.exe" SHA512MD5, SHA1, SHA256) are case-insensitive, but file paths containing spaces must always be wrapped in double quotes.
Beyond standard SHA-256 and MD5, Windows native tools support several other cryptographic, message-digest, and truncated checksum algorithms depending on your security requirements:
| Algorithm | PowerShell | CMD (CertUtil) | Primary Use Case & Description |
|---|---|---|---|
| MD5 | Yes | Yes | Legacy file integrity checks (Fast, but cryptographically broken). |
| SHA1 | Yes | Yes | Legacy checksums & Git commit tracking. |
| SHA256 | Yes | Yes | Modern industry default for software downloads & security verification. |
| SHA384 | Yes | Yes | High-security enterprise verification (384-bit SHA-2 family). |
| SHA512 | Yes | Yes | Maximum security distribution (Operating system ISOs & heavy releases). |
| SHA224 | No | Yes | Truncated 224-bit SHA-2 variant supported natively in CertUtil. |
| RIPEMD160 | Yes | No | 160-bit European cryptographic hash used in Bitcoin address generation. |
| MACTripleDES | Yes | No | Symmetric key-based Message Authentication Code (MAC) algorithm. |
Power users can add an instant right-click context menu option in Windows File Explorer to verify any file's SHA-256 hash in a popup terminal window.
Win + R, type regedit, and press Enter to open the Registry Editor.HKEY_CLASSES_ROOT\*\shellshell → New > Key and name it GetSHA256.GetSHA256 to Check SHA256 Hash.GetSHA256 → New > Key and name it command.command and set its value to:powershell.exe -noexit -command "Get-FileHash -LiteralPath '%1' -Algorithm SHA256 | Format-List"Now, right-clicking any file in Explorer will display a "Check SHA256 Hash" menu option!