Make sure a downloaded installer or ISO is exactly what the publisher released.
How to verify a download
Choose the downloaded file (up to 1 GB).
Copy the checksum published on the official download page.
Paste it in the box. A green tick means the file is intact.
Hashes are computed with your browser's built-in Web Crypto API. SHA-1 is shown for older sites, but it is no longer considered secure against deliberate tampering; prefer SHA-256.
Frequently asked questions
What about MD5?
Browsers' built-in crypto doesn't offer MD5, and MD5 is broken for security use. Use SHA-256 where possible.
Why doesn't my checksum match?
The download may be incomplete or altered, or the published value may use a different algorithm. Re-download from the official site.