Task guide Verify Download Integrity
Use this when a download matters enough that corruption or tampering would be a real problem.
A hash check turns vague trust into evidence. It helps you confirm that the file you received matches the file that was expected.
Files and Storage 15 min both
Safe first move Get the expected hash from a trusted source. Do not trust a hash from the same untrusted source as the suspicious file.
Use this when Use this when a download matters enough that corruption or tampering would be a real problem.
Goal
Confirm that the file you downloaded is the file you meant to trust.
Safe sequence
- Get the expected hash from a trusted source.
- Calculate the hash of the local file.
- Compare the values exactly.
- Trust the file only if the values match.
Move on when
- You can calculate a hash on your platform.
- You can compare it correctly.
- You know what a mismatch means.
Before you start - Get the expected hash from a trusted source.
- Use the exact file you intend to verify.
- Do not rename or re-save the file in a way that changes the contents first.
Verify with - The calculated hash matches the trusted published hash.
- You can state which algorithm was used.
- You can reject the file safely if the hashes do not match.
Avoid these mistakes - Do not trust a hash from the same untrusted source as the suspicious file.
- Do not keep using a file when the hash does not match.
- Do not confuse a matching file name with matching file contents.
Move on when - You can use a hash to verify an important file.
- You can explain why integrity checks belong before trust.
- You can stop using a mismatched file.
Reflect before you leave - Why does a matching file name not prove the file is safe?
- What would you do differently if the hash did not match?
Review this task again in about 1, 7, 21 days.