Verify a file’s SHA-256.
Drop any file to compute its SHA-256 checksum and compare it to an expected value, entirely in your browser. A sha256sum / Get-FileHash alternative, no install.
SHA-256 · Web Crypto · no upload · works offline
One changed byte, a completely different hash.
A SHA-256 hash is a 64-character fingerprint of a file’s exact bytes. Change one byte, a single character in a document or one pixel in an image, and the hash changes entirely. That’s what makes it the standard way to confirm a download, an email attachment, or a piece of evidence is byte-for-byte identical to the original.
This page computes the same digest as sha256sum yourfile on Linux/macOS or Get-FileHash yourfile -Algorithm SHA256 in PowerShell, without a terminal, and without uploading anything. Verifying a full multi-file EMP export package? That tool checks every file against the package manifest at once. SHA-256 is the integrity check. The product is the case workspace around it.
SHA-256, answered.
Is my file uploaded anywhere?
No. The hash is computed locally in your browser with the Web Crypto API. The file never leaves your device and works offline once the page has loaded.
How does this compare to sha256sum or PowerShell Get-FileHash?
It computes the exact same SHA-256 digest, just without a terminal. sha256sum file on Linux/macOS and Get-FileHash file -Algorithm SHA256 on Windows produce the identical hash you’ll see here.
What is a SHA-256 checksum used for?
A SHA-256 hash is a unique fingerprint of a file’s exact bytes. If a single byte changes, the hash changes completely. Comparing hashes proves whether a download, an attachment, or an evidence file is byte-for-byte identical to the original.
Can I verify a whole EMP export package?
For a full EMP Intake export (manifest + many files), use the EMP Export Package Verifier, which checks every file against the package manifest at once. This page is for hashing a single file.
Is SHA-256 enough to prove a file wasn’t tampered with?
A matching SHA-256 proves the bytes are identical to the reference hash you compared against. It’s the foundation of tamper-evidence, though no single hash, on its own, establishes legal admissibility; that’s the court’s call.
This is how EMP Intake keeps evidence verifiable.
EMP hashes every file with SHA-256 at intake and ships a manifest anyone can verify. No EMP installed.