MD5 Hash Checker

    MD5 Hash Checker: Verify a File in Seconds

    To check a file's MD5 hash, calculate its MD5 and compare it with the value the publisher lists. If all 32 characters match, the file is intact. Use the free online checker for files up to 10 MB, or the one-line command for Windows, macOS, or Linux below.

    Free online check · MD5, SHA-1, SHA-256, and CRC32 · No sign-up

    MD5 plus SHA-1, SHA-256, CRC32

    The free checksum calculator returns all four hashes for one file, so you can match whatever the publisher listed.

    Built-in commands, no install

    Windows, macOS, and Linux all ship an MD5 command. Copy the exact syntax below.

    Whole folders on desktop

    FolderManifest hashes entire folder trees with SHA-256 and flags any file that changed since the last check.

    How to check an MD5 hash

    1. 1

      Find the published MD5

      Copy the MD5 value from the download page, release notes, or the .md5 file next to the download.

    2. 2

      Calculate the MD5 of your file

      Upload the file to the free checksum calculator, or run the command for your operating system shown below.

    3. 3

      Compare the two values

      Both are 32 hexadecimal characters. Ignore upper or lower case. Every character must match.

    4. 4

      Act on the result

      A match means the file arrived intact. A mismatch means download it again and check the version before using it.

    Check MD5 with a built-in command

    Every major operating system can calculate MD5 without extra software, and there is no file size limit. Replace the path with your file and, where shown, paste the expected hash to get a pass or fail answer.

    Windows (Command Prompt)

    certutil -hashfile "C:\Downloads\file.iso" MD5

    certutil ships with every version of Windows. The algorithm name goes after the file path.

    Windows (PowerShell)

    Get-FileHash "C:\Downloads\file.iso" -Algorithm MD5
    (Get-FileHash "C:\Downloads\file.iso" -Algorithm MD5).Hash -eq "PASTE_EXPECTED_MD5"

    The second line prints True or False. PowerShell string comparison ignores case.

    macOS (Terminal)

    md5 ~/Downloads/file.dmg
    [ "$(md5 -q ~/Downloads/file.dmg)" = "paste_expected_md5" ] && echo OK || echo MISMATCH

    md5 -q prints only the hash. Paste the expected value in lowercase for this comparison.

    Linux (Terminal)

    md5sum file.iso
    echo "paste_expected_md5  file.iso" | md5sum -c -

    Note the two spaces between hash and filename. If the publisher ships a .md5 file, run md5sum -c file.iso.md5 instead.

    More detail: certutil on Windows, PowerShell Get-FileHash, and checksums on Linux.

    When MD5 is enough, and when to use SHA-256

    MD5 produces a 128-bit fingerprint, written as 32 hexadecimal characters. Change a single byte in the file and the hash changes completely, which makes MD5 good at catching accidental damage: a download cut short, a flaky USB stick, a copy that failed halfway.

    What MD5 cannot do is prove nobody tampered with a file on purpose. Researchers have shown how to build two different files with the same MD5, so a matching MD5 from an untrusted mirror is weak evidence. When a publisher lists both, check the SHA-256 value instead. The free calculator shows both at once.

    Want the longer explanation? Read MD5 vs SHA-256 explained →

    Which MD5 checker should you use?

    For one small file, the browser is fastest. For a big ISO, use the built-in command. For a whole folder you need to verify again later, use a manifest.

    OptionRuns onHashesLimitBest for
    FolderManifest checksum calculatorBrowserMD5, SHA-1, SHA-256, CRC321 file, 10 MBQuick check of a small file without opening a terminal.
    certutil / Get-FileHashWindows, built inMD5, SHA-1, SHA-256, SHA-512 and moreNo size limitLarge downloads such as ISOs on Windows.
    md5 / md5summacOS / Linux, built inMD5 (shasum / sha256sum for SHA)No size limitLarge files and scripted checks on Mac or Linux.
    FolderManifest desktopWindows, Mac, LinuxSHA-256 manifestsWhole folder treesVerifying backups, migrations, and folders you need to prove are unchanged.

    Checking hundreds of files? See the batch checksum tool →

    Frequently Asked Questions

    How do I check the MD5 hash of a file?

    Calculate the MD5 of the file you have, then compare it with the MD5 the publisher lists. Online, upload the file (up to 10 MB) to the free FolderManifest checksum calculator. On Windows run certutil -hashfile file.iso MD5 or Get-FileHash file.iso -Algorithm MD5; on macOS run md5 file.dmg; on Linux run md5sum file.iso. If the two 32-character values match, the file is intact.

    What does it mean if the MD5 hash does not match?

    The file you have is not byte-for-byte the file the publisher hashed. Usually the download was interrupted or corrupted, or you are comparing against the hash for a different version. Download it again from the official source and re-check. If it still does not match, do not open or install it.

    Does uppercase vs lowercase matter in an MD5 hash?

    No. An MD5 hash is a hexadecimal number, so 9E107D9D and 9e107d9d are the same value. certutil and Get-FileHash print uppercase, while md5sum and macOS md5 print lowercase. Compare the characters, not the case.

    Is MD5 still safe for checking files?

    MD5 is fine for catching accidental corruption, such as a broken download or a bad copy. It is not safe against deliberate tampering, because attackers can create two different files with the same MD5. If the publisher offers SHA-256, check that instead.

    Is the online MD5 checker private?

    The FolderManifest checksum calculator uploads your file over HTTPS, computes MD5, SHA-1, SHA-256, and CRC32 in memory on our server, and discards it. Files are never stored. For confidential files or anything over 10 MB, use the built-in commands on this page or the desktop app, which run entirely on your computer.

    Can I check the hashes of a whole folder at once?

    Not with the online tool, which takes one file at a time. The built-in commands can be looped over a folder. FolderManifest desktop hashes every file in a folder tree with SHA-256, saves the result as a manifest, and later tells you exactly which files changed, went missing, or were added. It uses SHA-256 rather than MD5.

    What users say

    A clearer folder story, from people who use it.

    Read all G2 reviews
    “FolderManifest makes it easy to organize folder structures and manage duplicate files while keeping everything safe and secure.”
    Mehedy H. avatarMehedy H.Research and operations
    “I can understand a project folder at a glance, review what changed, and keep the cleanup process clear for everyone involved.”
    Tasmina Akter C. avatarTasmina Akter C.Project coordination
    “FolderManifest clearly displays project structures and contents, making it easy to understand where everything is at a glance and maintain consistency across teams.”
    Zahirul I. avatarZahirul I.Business partnerBusiness-partner review

    Verify whole folders, not one file at a time

    FolderManifest hashes every file in a folder with SHA-256, saves a manifest, and shows exactly what changed after a backup, copy, or migration. Runs locally.

    Free for 7 days · No credit card · Runs locally · $59 lifetime