01

Local SHA-256 checker

The file is read into browser memory. Larger files are declined to limit memory pressure on phones. Files are not installed or uploaded.

Select a file to calculate its checksum. JavaScript and a secure browser context are required.
02

How to read the result

  • Calculated only: you have an identifier for your file, but no reference has been compared.
  • Match: the calculated value equals the supplied reference. You still need to establish that the reference belongs to a trusted publisher.
  • Mismatch: the file differs from the supplied reference. Stop and check whether the release, file or reference is different. Do not treat it as proof of malware by itself.
  • Unavailable: use a supported HTTPS browser or a local operating-system tool. This page does not fall back to uploading the file.
03

What the tool does not do

It does not parse the APK manifest, verify its signing certificate, scan malware, contact the developer or decide whether the game is permitted. Any file type can be hashed; successfully hashing a file does not mean it is a valid APK.

The 100 MiB limit is a website-tool limit, not an Android APK limit. On low-memory phones even smaller files may be slow; a desktop local utility is an alternative.

04

Local desktop alternatives

# Linux
sha256sum app.apk

# macOS
shasum -a 256 app.apk

# Windows PowerShell
Get-FileHash .\app.apk -Algorithm SHA256

Compare all 64 hexadecimal characters. Letter case does not change the hash value. Do not confuse a file SHA-256 with a signing-certificate SHA-256: they identify different things.

05

Privacy of this calculator

The calculator reads the selected bytes using browser file APIs and computes a digest using Web Crypto. It contains no upload request, third-party analytics or persistent storage. Copying the hash uses the clipboard only when you press Copy. Your hosting provider can still receive ordinary page-request logs. Read the site privacy scope.