How to Check a SHA256 or SHA1 Checksum in Windows 10

To check a SHA256 checksum in Windows 10, open PowerShell and type Get-FileHash followed by the file’s path, then press Enter. Compare the Hash it shows with the checksum on the download page. If they match, the file wasn’t changed or damaged. In Command Prompt, certutil -hashfile <file> SHA256 does the same thing.

Applies to: Windows 10. Checked against Microsoft Learn on September 27, 2026.

Use PowerShell (SHA256 by default)

  1. Right-click Start and select Windows PowerShell.
  2. Type Get-FileHash, a space, and the full path to the file. For example:

Get-FileHash C:\Users\Alex\Downloads\contoso-setup.exe

  1. Press Enter.
Windows PowerShell showing Get-FileHash output with the SHA256 hash highlighted
Run Get-FileHash (1) and compare the Hash (2) with the publisher’s checksum.

Tip: type Get-FileHash with a space, then drag the file from File Explorer into the window to paste its path.

For SHA1 or another type: add -Algorithm, for example:

Get-FileHash C:\Users\Alex\Downloads\contoso-setup.exe -Algorithm SHA1

Other choices include SHA384, SHA512, and MD5.

Use Command Prompt (certutil)

  1. Open Command Prompt. See how to open Command Prompt in Windows 10.
  2. Go to the folder with cd, or use the full path, and type:

certutil -hashfile contoso-setup.exe SHA256

Windows 10 Command Prompt showing certutil -hashfile output with the SHA256 hash highlighted
Run certutil -hashfile (1). The line under it is the hash (2).

Replace SHA256 with SHA1, SHA512, or MD5 if the publisher lists a different type.

Compare the hash

  • The checksum on the download page must match exactly. Upper and lower case don’t matter.
  • If it doesn’t match, download the file again from the official site. Don’t open a file with a wrong checksum.
  • To let PowerShell compare for you, run:

(Get-FileHash C:\Users\Alex\Downloads\contoso-setup.exe).Hash -eq "PASTE-THE-CHECKSUM-HERE"

It shows True if they match.

Frequently asked questions

SHA1 or SHA256: which should I use?

Use the one the publisher lists. If both are listed, choose SHA256. Microsoft notes that MD5 and SHA1 are no longer considered secure against deliberate tampering.

Where do I find my downloaded file?

See how to find downloads on Windows 10.

I downloaded an ISO. What’s next?

After checking it, see how to mount an ISO file in Windows 10.

Microsoft’s references are Get-FileHash and certutil. More help is on our Windows Help & Guides page.

Get Our Free Newsletter

How-to guides and tech deals

You may opt out at any time.
Read our Privacy Policy