Get any file’s SHA-256 fingerprint, compare it with a published checksum or another copy — calculated on your device, nothing uploaded.
Get any file’s SHA-256 fingerprint, compare it with a published checksum or another copy — calculated on your device, nothing uploaded.
A checksum answers one question with certainty: is this file byte-for-byte the same as that one? Software publishers list SHA-256 checksums so you can confirm a download wasn’t corrupted or swapped. Legal and compliance teams record them to prove a document hasn’t changed since it was signed or produced. GhostX computes the fingerprint in your browser, so you can check sensitive files without handing them to anyone.
Drop any file. It opens in the studio with Check it’s unchanged pre-selected. Nothing is uploaded.
Copy the SHA-256 fingerprint, and compare it with the checksum you were given.
Or choose a second file to byte-compare. GhostX tells you whether the two match.
A 64-character fingerprint calculated from every byte of a file. Change a single byte and the fingerprint changes completely, and no one has ever found two different files with the same SHA-256. Matching fingerprints mean identical files.
Drop the downloaded file here and compare its SHA-256 with the checksum the publisher lists on their website or release page. If every character matches, you have exactly the file they published. If not, don’t open it: it is corrupted or not the file they released.
Drop the first file, then choose the second in Byte-compare. GhostX fingerprints both and tells you whether they match, which is useful after copying backups, before deleting a duplicate, or to confirm a document you received is the one you sent.
No. The fingerprint is calculated in your browser with the Web Crypto API; the file never leaves your device.
Files up to 500 MB are hashed in the browser. For anything larger, use the sha256sum command (macOS/Linux) or Get-FileHash in PowerShell (Windows).
No, only SHA-256. MD5 and SHA-1 are broken for integrity checks: people can deliberately craft different files that share a fingerprint. Most publishers now list SHA-256.
Learn more: What is a SHA-256 checksum, and what does it prove?