New in 5.0: Hash/Check checks signatures and checksum files, so you know who made a download, not just whether it matches. Still offline. Still one job.
Hash/Check is the no-nonsense (okay, maybe a little nonsense) hash calculator for macOS.
Drop a file — any file — and Hash/Check instantly serves up its MD5, SHA1, SHA256, SHA384, and SHA512 fingerprints. Copy a hash from the internet, and Hash/Check quietly checks whether your download is the real deal. Green means go. Red means… maybe don't open that.
It also reads what developers publish to prove a download is theirs: checksum files like SHA256SUMS, and OpenPGP, minisign and SSH signatures. Trust a developer's key once and their next release turns green by itself. A release signed with a different key turns red, and says why.
Works the way you work:
- Drag & drop files onto the window or the menu bar icon, alone or together with their checksum file, signature or key
- Clipboard magic — copy a hash from anywhere and Hash/Check matches it automatically
- Finder Quick Actions — right-click any file to hash it on the spot via Shortcuts
- Downloads watcher — turn on "Monitor Downloads folder" and every new download is hashed the moment it finishes, along with any checksum file or signature that comes with it
- Dark mode, light mode, auto mode — Hash/Check follows your lead
No subscriptions. No telemetry. No funny business. Just hashes.
This app hasn’t received enough ratings or reviews to display an overview.
It worked
KirkRx
I've never used a tool like this before. Very easy. I downloaded qBittorrent and before opening the installer I dragged the image to Hash/Check and the app automatically copied the checksum from my clipboard and highlighted if there was a match or not. (make sure to highlight and copy (ctrl-c) the checksum you want to check against before dragging the downloaded image your checking into this app.
Simple, easy hash checking
TheKarateKidd
Finally an easy way to check hashes without wasting a few minutes running commands and shell scripts. THANK YOU!
Compare function not intuitive and broken
MC Ringbearer
Having to copy a hash value into the clipboard BEFORE calculating the hash is counter intuitive. You should simply allow user to PASTE a value into the compare field at the bottom. I wasted five minutes trying to figure out. Then as a test, I pasted garbage value into the clipboard then calculated the hash, and the app said Clipboard Match! across ALL algorithms, which is obviously incorrect. Completely unreliable.
Possible Malware
Leericly
Program refuses to quit and cannot be accessed from MacOS Force Quit. Performs operations using the CPU even when not attempting to hash a file. Beware!
Developer Response
** Update: yes, it has been a while, a whole year! So the issue was if you have a Very Large File™ in your downloads folder (such as having just downloaded Xcode) the app would try to create hashes of said Very Large File™ and would beachball due to ... well, not having implemented the app using modern async/multithreading techniques. Well, you're in luck as Version 2.0 has fixed the Beachball of Doom. Yay!
Sign/Check has arrived. "The hash matches" only means something if you trust where the hash came from, so now Hash/Check can ask who signed it.
Signatures, checked on the spot. The .sig and .asc files that sit next to many downloads (OpenPGP, the kind GnuPG makes), plus minisign and SSH signatures, are verified right in the window. No Terminal, no GnuPG to install, no incantations.
Keys with names. The first time a key shows up you get a polite yellow and a fingerprint to compare with the developer's site. Give it a name, and it's green from then on.
Loud about impostors. If a download from a site you trusted a key for turns up signed by a different key, that's red, and it says why.
Checksum files, read for you. Drop SHA256SUMS (or a .sha256 file) in with your download and Hash/Check finds the right line and tells you which file said so. No more squinting at sixty-four characters. A signed checksum list from a key you trust counts all the way down.
Found one lying around? A checksum list sitting next to your download in Downloads is checked too. It won't call that verified on its own, because anything that can put a file in Downloads can put a list beside it, but a mismatch still gets the full red treatment.
Downloads, handled. Turn on Monitor Downloads folder (Hash/Check offers the first time you open it) and every download is hashed the moment it finishes. No more "Get Hashes" button. Download the signature too and it's checked as soon as it lands.
Drop it on the menu bar. Drag a file, and its signature or checksum file, onto the menu bar icon and the answer pops up right there.
Where it came from, at a glance. The file details now show the page that linked to a download and the site that served it, read from the file itself on your Mac.
Downloaded it twice? A browser's "file (1).dmg" still pairs with the original's signature, and Hash/Check tells you when a file is identical to the one you just checked.
A new Keys tab in Settings, for renaming or removing the keys you trust. The color palettes have names now (Traffic, League and Vineyard), each with a third color for "careful," picked so every palette stays readable if you're colorblind.
Help is one click away: Help › Hash/Check Help opens the support page.
Still fully offline. Still one job. It just checks the job harder now.
Version 5.0
The developer, ciretose, indicated that the app’s privacy practices may include handling of data as described below. For more information, see the developer’s privacy policy .
Data Not Collected
The developer does not collect any data from this app.
Privacy practices may vary, for example, based on the features you use or your age. Learn More
Accessibility
The developer has not yet indicated which accessibility features this app supports. Learn More