How to Verify File Integrity with SHA-256 (Windows, Mac & Linux)

When you download a file from the internet — software, a system image, a backup archive — how do you know it arrived intact? A file can be silently corrupted during transfer, or worse, tampered with by a malicious actor before it even reached you. SHA-256 checksums give you a reliable way to answer that question in seconds.

This guide explains what SHA-256 file integrity verification is, why it matters, and exactly how to do it on any operating system.

What Is SHA-256 File Integrity Verification?

Every file, regardless of size or type, can be run through the SHA-256 algorithm to produce a unique 64-character string called a hash or checksum. Think of it as a fingerprint for the file. If even a single byte changes — whether from corruption, a failed download, or deliberate tampering — the resulting hash will be completely different.

When software publishers release downloads, they typically publish the expected SHA-256 hash alongside the file. You generate the hash of your downloaded copy and compare it to theirs. If they match, the file is exactly as intended. If they don’t, something went wrong.

How to Verify a SHA-256 Checksum

There are two ways to do this — using your operating system’s built-in command line tools, or using a browser-based tool that requires no commands at all.

Option 1 — Use a Browser-Based Tool (No Commands Required)

The quickest way is to use our free SHA-256 hash generator. Drag and drop your file, and the SHA-256 checksum is generated instantly in your browser. Your file is never uploaded — all processing happens locally on your device.

Switch to Verify mode, paste in the expected hash from the publisher, and the tool will immediately confirm whether they match.

This is ideal if you’re not comfortable with the command line, or if you’re working with sensitive files that you’d prefer never leave your machine.

Option 2 — Command Line

Windows (PowerShell)

Open PowerShell and run:

Get-FileHash C:\path\to\your\file.exe -Algorithm SHA256

The hash value will appear in the output. Compare it manually to the expected hash from the publisher.

Windows (Command Prompt)

certutil -hashfile C:\path\to\your\file.exe SHA256

Mac (Terminal)

shasum -a 256 /path/to/your/file

Linux (Terminal)

sha256sum /path/to/your/file

In all cases, copy the resulting hash and compare it character-by-character to the expected value. Even one character difference means the files do not match.

Useful link: Web Crypto API

What to Do If the Hashes Don’t Match

If the generated hash doesn’t match the expected one, do not open or run the file. Instead:

1. Delete the file immediately
2. Re-download it from the official source
3. Verify the checksum again before opening
4. If the hash still doesn’t match, contact the publisher — their download may be compromised

When Should You Verify File Integrity?

Get into the habit of checking checksums whenever you download any of the following:

• Operating system images (Linux ISOs, Windows installer files)
• Software installers, especially security tools or system utilities
• Firmware updates for routers, NAS drives, or other devices
• Backup archives before restoring them
• Any file received over an untrusted network

Verify SHA-256 Checksums Without the Command Line

If you’d rather skip the terminal entirely, our free SHA-256 hash generator handles both generation and verification in a simple drag-and-drop interface. No installation, no uploads, no account required — just drop your file and get an instant result.

Verify SHA-256 Checksums in Seconds — Free Tool

SHA-256 checksum verification is one of the simplest and most effective ways to confirm a file is exactly what it’s supposed to be. Whether you prefer the command line or a browser-based tool, the process takes under a minute and can save you from running corrupted or malicious files.