Verify an EMP export package.
An evidence export verifier that runs SHA-256 on every file against the manifest, right in your browser. Nothing leaves your device. It is a free evidence export verification tool, with no install and no upload. Also included inside of each export package.
EMP Export Package Verifier
SHA-256 integrity check · runs locally
No export handy? Load the sample and watch every file pass. Then save it, flip one byte, and run it again. The check catches it.
- XA renamed file fails. The manifest records each file at its exact path.
- XA re-saved file fails, even if it looks identical. One changed byte changes the hash.
- OKAn untouched copy passes, on any machine, every time.
Want to watch a failure happen? Run the live tamper demo, or load the sample export above and flip one byte.
What the verifier checks, with nothing to take on faith.
Hash every file
Every file the manifest.json lists gets re-hashed and matched, byte for byte, against the hash recorded at export.
Stays on your machine
The work happens in your browser. Nothing uploads. It runs offline, on evidence you never want leaving the room.
No license needed
Anyone reviewing the file can check it here without installing EMP. The reviewer recomputes the hashes and confirms the match.
About the verifier.
Does my evidence get uploaded?
No. The hashing runs in your browser through the Web Crypto API. No file contents and no hashes leave the page. Pull the network and it still works.
Do I need an EMP license to verify a package?
No. Anyone reviewing the package can check it here, free, with no EMP software installed. Opposing counsel, for instance, recomputes the hashes themselves.
What exactly does it check?
It re-hashes every file the manifest lists and compares each one to the hash recorded at export, flagging anything modified or missing.
The ZIP won’t open. What now?
Some browsers can’t read ZIP64 or certain compression. Extract the package, then use “Select export folder” on the unpacked files.
Is a passing result proof of admissibility?
No. A pass shows that the files match the hashes recorded in the manifest. It does not decide what the evidence means or whether a court will admit it. The court decides admissibility.
Your evidence outlives the software.
The export format is open and documented, and the check is yours to run here, offline, free. Tamper-evident, not tamper-proof: the verifier proves the bytes are unchanged. What they mean is for the court to decide. Every EMP export also ships this same check as a standalone verify_integrity.html, so a recipient can verify offline without installing anything.