How to Verify a Download With SHA-256

Checksums help verify that downloaded bytes match a trusted publisher-provided digest.

Step-by-step troubleshooting

1. 01

   Find the official value

   Obtain the checksum directly from the publisher over a trusted HTTPS page or signed release.

2. 02

   Keep your download unchanged

   Renaming does not affect SHA-256, but changing any file bytes does.

3. 03

   Calculate SHA-256

   Open the SHA-256 File Checksum tool and select the downloaded file.

4. 04

   Compare every character

   A mismatch means the bytes are different; download again before installing.

5. 05

   Understand the limit

   A matching hash only authenticates the file if the expected hash comes from a trustworthy source.

What if the file is still broken?

Structural checks can identify evidence of truncation, checksum errors or a format mismatch, but a successful check does not prove every application can decode the file. If critical data is missing, restore from backup, request a new copy or use a reputable specialist with permission to access the content.

For important or sensitive files, retain a copy of the original and document each recovery attempt. Avoid tools that promise guaranteed reconstruction of missing bytes.

For a practical recovery order that minimizes accidental damage, see our safe file recovery checklist. For format-specific limits, see supported formats and test scope.