How to Verify File Integrity on Windows: Complete 2026 Guide

Why Verify File Integrity on Windows?

File integrity verification confirms that files haven't been corrupted, tampered with, or accidentally modified. On Windows, this is critical for:

• Downloaded files: Verify that installers and archives match the publisher's checksum
• Backup verification: Confirm backups are identical to originals
• Data migration: Ensure files copied correctly to new drives or servers
• Security auditing: Detect unauthorized file modifications
• Software deployment: Verify deployed files match build artifacts
• Compliance: Meet audit requirements for data governance (SOX, ISO 27001, HIPAA)

Method 1: CertUtil (Built-in Windows Tool)

CertUtil is included with every modern Windows installation. It generates file hashes without any additional software — just open Command Prompt.

Basic SHA-256 Hash

Open Command Prompt and run:

certutil -hashfile "C:\path\to\file.txt" SHA256

Output Example

SHA256 hash of C:\path\to\file.txt:
a1 b2 c3 d4 e5 f6 78 90 12 34 56 78 9a bc de f0
12 34 56 78 9a bc de f0 12 34 56 78 9a bc de f0
CertUtil: -hashfile command completed successfully.

Other Supported Algorithms

Batch Multiple Files

Create a batch script to hash multiple files:

@echo off
for %%f in (C:\folder\*.txt) do (
  echo === %%f ===
  certutil -hashfile "%%f" SHA256
  echo.
)
pause

Method 2: PowerShell Get-FileHash

PowerShell's Get-FileHash cmdlet is more flexible than CertUtil. It supports pipeline operations, automation, and produces cleaner output.

Basic SHA-256 Hash

Get-FileHash "C:\path\to\file.txt" -Algorithm SHA256

Output Example

Algorithm       Hash                                                                   Path
---------       ----                                                                   ----
SHA256          A1B2C3D4E5F6789012345678...                         C:\path\to\file.txt

Compare Two Files

Check if two files are identical:

$hash1 = (Get-FileHash "C:\folder\original.txt" -Algorithm SHA256).Hash
$hash2 = (Get-FileHash "C:\folder\copy.txt" -Algorithm SHA256).Hash

if ($hash1 -eq $hash2) {
    Write-Host "Files are IDENTICAL" -ForegroundColor Green
} else {
    Write-Host "Files are DIFFERENT" -ForegroundColor Red
}

Hash All Files in a Folder

Get-ChildItem "C:\folder" -Recurse -File |
  Get-FileHash -Algorithm SHA256 |
  Export-Csv -Path "C:\checksums.csv" -NoTypeInformation

Write-Host "Checksums exported to C:\checksums.csv"}

Verify Against Baseline

Compare current files against a saved baseline:

$baseline = Import-Csv "C:\checksums.csv"
$current = Get-ChildItem "C:\folder" -Recurse -File | Get-FileHash -Algorithm SHA256

foreach ($file in $current) {
    $base = $baseline | Where-Object { $_.Path -eq $file.Path }
    if ($base -and $base.Hash -ne $file.Hash) {
        Write-Host "CHANGED: $($file.Path)" -ForegroundColor Yellow
    } elseif (-not $base) {
        Write-Host "NEW: $($file.Path)" -ForegroundColor Cyan
    }
}

FolderManifest Desktop provides a visual, point-and-click interface for file integrity verification. It combines the accuracy of SHA-256 checksums with an intuitive GUI — no command-line skills needed.

How to Verify Files

Features

Method 4: Online Verification Tools

If you need to verify a file quickly without installing anything, online tools like FolderManifest's free file comparison tool work directly in your browser.

Using FolderManifest Online

Method Comparison

Automating Integrity Checks

For regular verification, automate your integrity checks with a PowerShell script or Windows Task Scheduler.

PowerShell Verification Script

# verify-integrity.ps1
# Compares current files against a saved baseline

$folder = "C:\ImportantData"
$baseline = "C:\baseline-checksums.csv"
$log = "C:\integrity-log.txt"

$results = Get-ChildItem $folder -Recurse -File | Get-FileHash -Algorithm SHA256
$base = Import-Csv $baseline

$mismatches = 0
$missing = 0

foreach ($b in $base) {
    $current = $results | Where-Object { $_.Path -eq $b.Path }
    if (-not $current) {
        Add-Content $log "[$(Get-Date)] MISSING: $($b.Path)"
        $missing++
    } elseif ($current.Hash -ne $b.Hash) {
        Add-Content $log "[$(Get-Date)] CHANGED: $($b.Path)"
        $mismatches++
    }
}

Add-Content $log "[$(Get-Date)] Check complete: $mismatches changed, $missing missing"

if ($mismatches -gt 0 -or $missing -gt 0) {
    Write-Host "INTEGRITY ISSUES FOUND" -ForegroundColor Red
} else {
    Write-Host "All files verified OK" -ForegroundColor Green
}

Schedule with Task Scheduler

1. Open Task Scheduler (taskschd.msc)
2. Create a new Basic Task named "File Integrity Check"
3. Set trigger to Weekly (or your preferred schedule)
4. Set action to "Start a program"
5. Program: powershell.exe
6. Arguments: -ExecutionPolicy Bypass -File "C:\verify-integrity.ps1"
7. Finish — the script runs automatically on schedule

Best Practices

Frequently Asked Questions

How do I check file integrity on Windows?

The fastest way is to open Command Prompt and run certutil -hashfile filename.txt SHA256. For a visual interface, use FolderManifest Desktop or the free online comparison tool.

Is CertUtil built into Windows?

Yes. CertUtil is included with all modern Windows versions — Windows 10, Windows 11, and Windows Server. No installation or download is needed.

What is the difference between MD5 and SHA-256?

SHA-256 produces a 256-bit hash and is cryptographically secure with no known collision attacks. MD5 produces a 128-bit hash and has known vulnerabilities where different files can produce the same hash. Always prefer SHA-256 in 2026.

Can I automate file integrity checks on Windows?

Yes. Write a PowerShell script using Get-FileHash and schedule it with Windows Task Scheduler. FolderManifest Desktop also supports repeatable verification workflows with HTML report exports.

How do I compare checksums of two files?

Generate the SHA-256 hash of both files using CertUtil or PowerShell. If the hash strings match exactly, the files are byte-for-byte identical. FolderManifest automates this comparison visually.

Does Windows File Explorer show file checksums?

No. Windows File Explorer does not display file checksums natively. You need to use CertUtil, PowerShell, or a third-party tool like FolderManifest.

What if two files have different hashes?

Different hashes mean the files differ — even a single byte change produces a completely different SHA-256 hash. Investigate the cause: corruption, unauthorized modification, or different versions.

Can I verify files without installing software?

Yes. Use CertUtil or PowerShell (both built-in) for command-line verification. Or use FolderManifest's free online tool — works in any browser with no installation.

How long does SHA-256 verification take?

SHA-256 is fast. A 10MB file hashes in 1-2 seconds. Even large folders (thousands of files) complete in minutes on modern hardware. The security benefit far outweighs the minimal time cost.

Continue Learning

• File Integrity Verification Methods →
• How to Generate SHA-256 Checksum (All OS) →
• SHA-256 vs MD5: Why Checksum Algorithm Matters →
• Compare Folders Online →

Compare Other File Types