>

Verify downloads with sha512sum

Check that an ISO or package file arrived bit-for-bit intact before you flash or install it.

Linuxsha256sumverifychecksumsecurityLow risk
Save the publisher's checksum list next to the download and run sha512sum -c SHA512SUMS — each file should report OK.

01Command

Command
$ sha512sum -c SHA512SUMS

02What it does

sha512sum computes a 512-bit hash that changes if even one bit of the file differs, catching truncated downloads and corrupted USB sticks. The -c mode reads a checksum list and verifies every entry, printing OK or FAILED per file; without -c it just prints hashes you can eyeball. The same syntax applies to sha256sum and the whole md5sum family.

03Risk

RiskLow risk
Requirementssha512sum is part of GNU coreutils; available on every Linux distro. Download the checksum file from the same trusted site as the file.
!Warning: A matching hash proves the file matches the list, but if both come from a compromised mirror it proves nothing — get checksums from the project's HTTPS site or GPG-signed files. md5sum is fine for detecting accidental corruption but must not be trusted against deliberate tampering.

04Undo

✓No undo needed — this command does not change persistent state.

05Sources

  • sha512sum(1) — Arch Manual Pages
    Arch Linux · community · 2026-09-17
    Evidence: Same coreutils page: -c/--check verifies listed checksums, --tag and per-file OK/FAILED reporting described.
  • sha512sum(1) — Debian bookworm
    Debian Manpages · community · 2026-09-17
    Evidence: Documents sha512sum [OPTION]... [FILE]... with -c, --check reading checksums from a file and verifying each listed file.

Last verified: 2026-09-19 · Category: Security & Privacy

06Related solutions

Create an SSH key pair with ssh-keygen (Ed25519)
LinuxTerminaldevelopersecurity

Generate a modern Ed25519 public/private key pair in ~/.ssh for authenticating to servers and Git platforms without passwords.

Low risk ✓ 2026-09-17
Change file permissions with chmod
LinuxFilesTerminalsecurity

Add or remove read, write, and execute permission for the owner, group, or others using symbolic or octal modes.

Medium risk ✓ 2026-09-17
Allow a port through the firewall with ufw
Linuxnetworksecurity

Add a UFW rule to permit inbound traffic on a TCP or UDP port, such as SSH on port 22.

High risk ✓ 2026-09-17