Safety checks · free tool

File Fingerprint Checker (SHA-256) for APKs

Updated 8 October 2026 · 5 minute read

A fingerprint is a 64-character value worked out from every byte of a file. If your file gives the same fingerprint the publisher printed, it is the same file. If it does not, do not install it.

Tool · runs in your browserNothing is uploaded

Worked example, not your file. A tiny made-up file stands in for an app file here, so you can see what the result looks like. Choose your own file above and this is replaced.

Matcheswhat the checker says about the example file example-game.apk

64characters in a SHA-256 fingerprint (0–9 and a–f)

46 bytessize of the example file (real app files are millions of bytes)

50 4b 03 04first four bytes in hex: how every Android app file begins

example-game.apk is 46 bytes here (a real app file is millions of bytes, but the method is the same). The checker works out its fingerprint, and it is the same 64 characters the publisher printed, so the result is Matches.

The example, step by step
Step	What the checker shows
The file you have	example-game.apk · 46 bytes
Its SHA-256 fingerprint	36285b71 22ce659f 1b13ed47 2c9113de 28d994b1 49d99bb1 db9f7f4c 57b287c9
What the publisher printed	36285b71 22ce659f 1b13ed47 2c9113de 28d994b1 49d99bb1 db9f7f4c 57b287c9
Result	Matches

What a fingerprint is

A fingerprint is a short value worked out from every byte of a file, a byte being one small piece of its data. This tool uses SHA-256, a standard method that always gives 64 characters: the digits 0 to 9 and the letters a to f. Change one byte of the file and the whole value changes, not just a character or two. Rename the file and nothing changes, because the name is not part of what is measured.

Two copies of a file give the same fingerprint on any phone or computer. That is what makes it useful. If a publisher prints the fingerprint of the file it means to hand out, you can work out yours and compare. The tool shows yours in eight blocks of eight characters, like this made-up value that belongs to no real file:

01234567 89abcdef 01234567 89abcdef 01234567 89abcdef 01234567 89abcdef

How to use the tool

Under Choose the file in the tool above, press the file button and pick your file. On a phone your file picker opens, and the Android steps walk through it.
Wait a moment while your browser reads the file. The tool shows its name, its size and its fingerprint.
Paste the fingerprint the publisher printed into the second box. Spaces, colons, dashes and capital letters do not matter, and a leading “SHA256” label is fine.
Read the coloured badge: Matches, Does not match or Not a fingerprint. With nothing pasted you get the fingerprint alone.

App files are ZIP archives, which means many files packed into one. The tool also checks how your file begins. If it does not begin like a ZIP, the tool says so, and if you expected an app, treat that with suspicion.

What the result means

What you see	What it tells you	What to do next
Matches	Your file is identical to the file that fingerprint was printed for	Run the other checks below. A match proves less than it seems
Does not match	Your file is not that file. It may be changed, damaged in the download, or a different version	Do not install it. Delete it, download once more from the same place and check again
Nothing to compare (second box empty)	You have the file’s fingerprint but nothing to hold it against	Treat the file as unchecked. Ask the publisher for its SHA-256 fingerprint, or skip the file
Not a fingerprint	The text you pasted is not 64 characters of 0–9 and a–f	Paste it again in full. MD5 and SHA-1 are older kinds of fingerprint, with 32 and 40 characters; this tool checks neither

Where the fingerprint must come from

A fingerprint is only worth something if it did not travel with the file. When one page, chat or channel hands you both, whoever swapped the file could have swapped the number too, and a match shows only that the download arrived whole. Look for the fingerprint in a second place: the publisher’s own page, reached by an address you typed yourself.

This site hosts no app files and cannot tell you what a correct fingerprint is for any file. Only the file’s publisher can. If you are checking a file only because you want an icon on your home screen, you may not need the file at all. Using the website without an app file explains how.

What a match does not prove

A match shows that your file is the file the fingerprint was printed for. It does not show that the publisher is trustworthy, that the app does only what it says, or that this is the newest version. A publisher can print the fingerprint of anything, and a seller of a “mod” file can print one for the mod. We cannot see inside any app or platform, and neither can this tool. After a match, still:

check how the download link reached you with the link checker;
read what the app asks to do before you install it, using permissions to refuse;
remember that a file sold as “unlimited” or as a “predictor” promises what a file on your phone cannot deliver. Mod APK and unlimited money explains why.

Privacy and limits

Your browser reads the file on your own device. The file is never uploaded, and the tool sends nothing while it works out the fingerprint. Two limits are worth knowing:

Size. A browser has to hold the whole file in memory to work out its fingerprint, so the tool stops at about 1.5 GB.
One kind of value. It checks SHA-256 only. If a publisher gives only MD5 or SHA-1, ask for SHA-256.

Other ways

For a file above that size, or if you like a terminal, your computer can work out the same value with a built-in command. Check a SHA-256 fingerprint on a computer has the exact commands for Windows, macOS and Linux. On a phone, check a file fingerprint on an Android phone goes step by step. This is one of the free tools on this site.

More about the file fingerprint checker

On a computerThe exact commands for Windows, macOS and Linux, what their output looks like, and how to compare two long values.On an Android phoneStep by step in Chrome: pick the file from Downloads, paste the publisher’s fingerprint, read the result and clean up.

Common questions

Is my file uploaded when I check its fingerprint?

No. Your browser reads the file on your own device and works out the fingerprint there. Nothing is sent to this site or anywhere else while it does.

What if the publisher gives me an MD5 or SHA-1 value instead?

This tool checks SHA-256 only. MD5 and SHA-1 are older kinds of fingerprint, with 32 and 40 characters. Ask the publisher for a SHA-256 value, or treat the file as unchecked.

Does a matching fingerprint mean the app is harmless?

No. It means your file is identical to the one the fingerprint was printed for. It says nothing about what that file does or who made it, so still check where the link came from and what the app asks for.

Why does the tool say my file does not look like an Android app file?

Android app files are ZIP archives, and a ZIP file starts with a fixed marker. If yours does not, it is not packed like an app file. If you expected an app, treat the file with suspicion.

If the publisher gives no fingerprint, can I still use the tool?

You can work out your file’s fingerprint, but nothing exists to hold it against, so the file stays unchecked. Ask the publisher for one, use the website instead of a file, or skip the file.

Can I check a file bigger than 1.5 GB?

Not in the browser. The tool stops at about 1.5 GB because a browser has to hold the whole file in memory. Use a command on a computer instead; the computer page has them.

More on tools

Login link checkerPaste a link and get a low, medium or high rating from the address alone, with the reasons listed. Nothing leaves your device.Expected-loss calculatorSee the average cost of a session of round-based games, and how little luck matters once the rounds add up.Prediction simulatorThree tests on fair random rounds: how long streaks run, whether pattern rules beat guessing, and what doubling after a loss risks.Bonus calculatorTurn a bonus offer’s turnover terms into the amount to bet, its average cost and what the bonus is worth.Aviator odds calculatorHow often a crash game reaches your cash-out target, what it keeps on average, and practice rounds with pretend money.Wingo calculatorExact odds and the average cost of Wingo-style colour, number and big-small bets, by round length, with practice rounds on pretend money.Colour history analyserPaste recent results and see how they compare with random ones, with a plain verdict on each check and a test of the popular “bet the opposite” rule.Streak oddsThe exact chance of a run in a row somewhere in your rounds, the longest run to expect and how many rounds pass before a run turns up.Mines oddsThe chance of each safe pick in a Mines-style game, the payout it needs, what the game keeps, and a practice grid with pretend money.Plinko oddsThe exact chance of every Plinko slot, what a board returns for the payouts you type, and practice drops with pretend money.Dice oddsThe chance of winning a roll-over or roll-under dice bet, what it pays, what the game keeps, and practice rolls with pretend money.Dragon Tiger oddsThe exact chance of a tie, what Dragon, Tiger and Tie bets keep on average, and practice rounds with pretend money.K3 dice oddsThe exact chance of every K3-style bet on three dice, what each keeps on average, and practice rolls with pretend money.Lottery oddsThe exact chance of every match in a pick-numbers lottery or a five-digit game, and what a ticket costs on average.Martingale calculatorThe bet ladder of a raise-after-a-loss plan, how many losses your money covers, how often it breaks and the exact average cost.Probability calculatorThe chance of at least one, exactly k or k or more in a number of tries, plus streaks and how many tries it takes.Odds converterOdds in decimal, fractional and American form, the chance they imply, what a stake returns and the margin in a market.Win rate calculatorYour win rate, the break-even win rate for a payout and fee, a 95% range and an exact test of whether the record could be luck.Session budgetTurn the most you will lose in one session into a stake per round, with the exact chance of going past the limit.Loss recoveryThe gain needed to get back what you lost, the wins in a row it takes, and the exact chances of getting back or running out first.Rebate calculatorSet a rebate, cashback or fixed reward against what the game keeps, and see the net cost and the break-even rate.Session timerA countdown with break reminders that also shows, in rupees, what the minutes cost on average.Play ledgerA private log of play sessions with totals by week and month and a CSV export, kept only in your browser.UPI link decoderRead the payee, amount and note inside a upi:// link or QR text, with a list of what looks odd. Nothing leaves your device.Scam message checkerPaste a message and see the scam habits in its words, rated Low, Medium or High, with the matched words listed. Nothing leaves your device.App permission checkerTick the permissions an app asks for and read what each can do, which a games app has no need for, and which pairs matter most.Password checkerEstimate the guesses a password might take, see which habits make it guessable, and make a random password. Nothing leaves your device.Login troubleshooterSix common sign-in and install problems, a few yes or no questions each, and advice that ends on the one guide to read next.Phone number checkerPaste an Indian mobile number to see if it fits the ten-digit format, what the prefix means and which typing slip may be the problem.Install checklistTwelve checks before you install an app file, answered Fine, A problem or Not checked, with a list of what to do about each.