For a straightforward SHA-256 checksum, start with GNU Coreutils’ sha256sum if it is available on your system. It can calculate a digest and check saved checksum manifests. For other workflows, hashdeep is designed for recursive inventories and audits, RHash and OpenSSL offer broader digest options, b3sum handles BLAKE3, and xxhsum is for fast, non-cryptographic checksums—not security checks.
These are useful choices, but they are not 22 independently verified tools. The options below are organized by workflow, with related Coreutils commands treated as one tool family rather than padded into a list of separate products.
As an Amazon Associate I earn from qualifying purchases.
Choose a hashing tool by the job
- Verify a downloaded file against a SHA-256 value or manifest: use
sha256sumwhen available, or OpenSSL’sdgstif that fits your installed tools. - Generate or check common checksum files: GNU Coreutils is a practical baseline, especially when compatibility with familiar sum-command manifests matters.
- Hash a directory tree or audit many files: consider
hashdeep, whose documented workflows include recursive hashing and matching hashes against known values. - Choose among many digest algorithms or formats: consider RHash, checking the local manual because supported algorithms and behavior can vary by packaged version.
- Use BLAKE3 specifically: choose
b3sumwhen BLAKE3 is suitable or required; do not assume it matches a checksum published in another algorithm. - Compare data quickly without adversarial security requirements:
xxhsumoffers xxHash checksums, but xxHash is non-cryptographic.
What a checksum can—and cannot—prove
A digest is a computed value for bytes. Checking a file against a trusted reference digest can show whether the bytes match that reference. It does not, by itself, prove who created the file or that the reference is authentic. Get the reference from a source you trust; for security-sensitive verification, use an appropriate cryptographic algorithm and, where authenticity matters, a trusted signature or other authenticated source.
Do these 3 things before closing this tab:
1Fix the driver behind crashes, sound loss and screen glitches2Repair Windows errors before they cause bigger problems3Scan for outdated or missing drivers - takes under a minuteDo not use MD5, SHA-1, CRCs, or xxHash as though they provide modern adversarial collision resistance. GNU’s manual recommends considering SHA-2, SHA-3, or BLAKE2b for more secure hashes. Algorithm choice should follow the purpose and the format of the checksum you need to verify, not a general assumption that one digest works for every file.
#1 Best Overall
- USB-C 2-in-1 storage OTG: The Lexar JumpDrive Dual Drive D40E features USB Type-A and Type-C connectors in a slim, portable form factor for easy device compatibility
- Transfer speeds up to 100MB/s: Based on internal testing, performance may vary depending upon the host device, interface, and usage conditions. 1MB=1,000,000 bytes
- Plug and Play: Widely compatible with USB Type-C smartphones, tablets, laptops, Macs, and traditional Type-A devices, no software installation required. The 360° swivel design allows for easy switching between connectors without the hassle of losing a cap
- Durable & Compact: The Lexar D40E USB memory stick features a metal enclosure, withstands temperatures from 0° to 50° C (32°F to 122°F), and is lightweight at 26g with dimensions of 70.4 x 16.9 x 11.7mm
- Security & Warranty: Securely protects files using an advanced security software solution with 256-bit AES encryption. Backed by a Lexar 3-year limited warranty
Best options by workflow
| Tool or family | Best fit | Documented capabilities and cautions |
|---|---|---|
| GNU Coreutils sum commands | Everyday file checksums and manifest checking | Includes commands such as md5sum, sha1sum, SHA-2 sum commands, b2sum, and cksum. Sum commands can calculate and check digests. Commands available depend on the operating system and installation. GNU Coreutils manual and manual PDF. |
b3sum |
Calculating or checking BLAKE3 hashes | The project documents checksum checking, raw output, configurable output length, and thread options. It is algorithm-specific; use it when BLAKE3 is appropriate or required. BLAKE3 project README. |
xxhsum |
Speed-oriented checksums where cryptographic security is not needed | Calculates and checks xxHash checksums and includes benchmark options. xxHash is non-cryptographic and is not suitable for security-related verification. xxHash project and Debian xxhsum manual. |
| RHash | Users who need a broad selection of digest algorithms or formats | The FreeBSD ports manual documents CRC variants, MD5, SHA families, Tiger, BitTorrent-related hashes, and others. Check the manual or rhash --help for the locally packaged version. FreeBSD RHash manual. |
hashdeep |
Recursive multi-file inventories and audit workflows | The manual describes recursive hashing, computing multiple digests, matching known hashes, and auditing. Documented algorithms include MD5, SHA-1, SHA-256, Tiger, and Whirlpool. Its manual may lag current releases; confirm maintenance and package availability for your platform before relying on it. hashdeep manual. |
OpenSSL dgst |
Users already working with OpenSSL or needing its available digest functions | Can output message digests for files and supports signature operations. Available algorithms can depend on the OpenSSL version and provider configuration. OpenSSL 3.4 dgst manual. |
Calculate and verify a SHA-256 checksum with Coreutils
On a system with GNU Coreutils, calculate a digest by passing a file path to sha256sum:
sha256sum download.iso
The command prints a SHA-256 digest and the file name. Compare the digest with the value published by a source you trust. To check a saved manifest in the format understood by the command, run:
Rank #2
- High-speed USB 3.0 performance of up to 150MB/s(1) [(1) Write to drive up to 15x faster than standard USB 2.0 drives (4MB/s); varies by drive capacity. Up to 150MB/s read speed. USB 3.0 port required. Based on internal testing; performance may be lower depending on host device, usage conditions, and other factors; 1MB=1,000,000 bytes]
- Transfer a full-length movie in less than 30 seconds(2) [(2) Based on 1.2GB MPEG-4 video transfer with USB 3.0 host device. Results may vary based on host device, file attributes and other factors]
- Transfer to drive up to 15 times faster than standard USB 2.0 drives(1)
- Sleek, durable metal casing
- Easy-to-use password protection for your private files(3) [(3)Password protection uses 128-bit AES encryption and is supported by Windows 7, Windows 8, Windows 10, and Mac OS X v10.9 plus; Software download required for Mac, visit the SanDisk SecureAccess support page]
sha256sum -c SHA256SUMS
The check reports whether each listed file matches its recorded digest. Run it from the directory where the listed paths resolve, or use paths in the manifest that resolve from your current directory. A successful match means the file agrees with the manifest; the manifest’s provenance still matters.
Recommended Free Tools
Other systems may not include GNU Coreutils or may use different command names or options. Check what is installed and consult that implementation’s help or manual before relying on a command-line example on another platform.
Rank #3
- What You Get - 2 pack 64GB genuine USB 2.0 flash drives, 12-month warranty and lifetime friendly customer service
- Great for All Ages and Purposes – the thumb drives are suitable for storing digital data for school, business or daily usage. Apply to data storage of music, photos, movies and other files
- Easy to Use - Plug and play USB memory stick, no need to install any software. Support Windows 7 / 8 / 10 / Vista / XP / Unix / 2000 / ME / NT Linux and Mac OS, compatible with USB 2.0 and 1.1 ports
- Convenient Design - 360°metal swivel cap with matt surface and ring designed zip drive can protect USB connector, avoid to leave your fingerprint and easily attach to your key chain to avoid from losing and for easy carrying
- Brand Yourself - Brand the flash drive with your company's name and provide company's overview, policies, etc. to the newly joined employees or your customers
When a directory audit needs more than a one-file command
Single-file sum commands are convenient for a known file and a saved checksum. For inventories spanning a directory tree, the important questions are whether the utility walks folders recursively, records multiple files in a reusable form, computes the needed algorithms, and can later compare that record with the files on disk. The hashdeep manual describes those recursive and audit-oriented workflows, including matching against known hashes.
Before adopting it for an operational audit, verify that its current package is maintained and available for your system. The available documentation establishes its intended workflow and listed algorithms, but does not establish current package status for every platform.
Rank #4
- GOOD VALUE PACKAGE - 1 Pack 32GB Memory Stick USB 2.0 Flash Drives with great cost performance and high quality.
- BIG CAPACITY - The available capacity: 29.10GB-29.8GB, You can save the data of movies, music, photos, designs, programs, manuals, handouts in a high speed.Good performance in digital data storing, transferring and sharing with families, friends, workmates, clients and machines.
- EASY TO USE & PLUG AND WORK - Support windows 7 / 8 / 10 / Vista / XP / 2000 / ME / NT Linux and Mac OS, Compatible with USB2.0 and below.
- TWISTTURN DESIGN & EASY CARRY - The metal clip rotates 360° round the ABS plastic body which with rubber oil skin feeling finish. The capless design can avoid lossing of cap, and providing efficient protection to the USB port.
- WARRANTY & SUPPORT - SIMMAX logo is laser printed on the USB connector surface, our products are of good quality and we promise that any problem about the product within one year since you buy.
When a fast checksum is not a security hash
xxhsum is useful when the goal is fast comparison and collision resistance against an attacker is not required. The xxHash documentation describes checksum checking and benchmark facilities; those facilities are not a controlled cross-tool performance comparison. No universal speed ranking follows from the existence of a benchmark option.
For integrity or authenticity decisions where an adversary could manipulate files, use a suitable cryptographic digest and a trusted reference instead. xxHash’s non-cryptographic design makes it a poor fit for that threat model.
Best Value
- 【16GB Flash Drive】USB flash drives with 16GB capacity, meet your needs of daily use on work, school, home and travelling for photos, music, videos, files storage and transfer. IMEASON thumb drives can be used to store different files, easy to data backup.
- 【Metal Swivel Cap Design】USB thumb drive is metal swivel cover provides extra protection for the usb thumbdrive connector, no usb drive cap to lose; keychain design makes it easier to carry without worrying lose it.
- 【Wide Compatibility】USB drive supports Windows 7/8/10/11 / Vista / XP / Unix / 2000 / ME / NT Linux and Mac OS, also Supports USB 2.0 and 1.1 ports. USB Stick support TV, desktop, notebook computer, car, audio and other device. The USB Memory Stick is your great data storage and transfer companion with traveling and working.
- 【Easy to use】usb memory stick is plug and play without any software installation. Just simply plug the Flashdrive into the port of your USB-compatible devices such as computer, laptop to start data storage or transmission.
- 【What You Get】16 GB USB Flash Drive Thumb Drive, The default format of the usb storage flash drive is FAT32.
OpenSSL, RHash, and algorithm-specific choices
Use OpenSSL when it fits your existing workflow
OpenSSL’s dgst command calculates message digests for files and also exposes signature-related operations. Its available digest choices can vary with the installed OpenSSL version and provider configuration, so consult the manual for the version on your system rather than assuming every build exposes the same algorithms.
Use RHash when you need variety
RHash is a better fit than a narrow single-algorithm executable when you need a selection of digest algorithms or formats. Its documented selection includes checksums and cryptographic digest families, but packaged versions may differ. Check rhash --help or the local manual before generating a manifest that another system must consume.
Use b3sum only when BLAKE3 is the intended format
b3sum provides a dedicated BLAKE3 command line, with documented support for checking, raw output, configurable output lengths, and thread options. It cannot verify a SHA-256 checksum merely because both values are hashes: the algorithm and output format must match the published reference.
Why hashcat is not a routine file-checksum tool
Hashcat is free and open source, but it is a password-recovery platform with many hash modes. That purpose differs from calculating a file’s digest or checking a checksum manifest, so it is not a substitute for the tools above in ordinary file-integrity workflows.
Quick Recap
What to compare before choosing
- Algorithm: use the algorithm required by the published checksum, or select a cryptographic digest appropriate to the security need.
- Workflow: decide whether you need a one-file calculation, manifest verification, recursive inventory, or audit against known hashes.
- Compatibility: confirm that the generated output can be checked by the recipient’s tools and matches the expected manifest format.
- Platform and package: check which commands are installed and whether the relevant version supports the needed options.
- Maintenance: consult current project documentation and package information, especially for audit utilities whose manuals may lag releases.
- Performance: compare tools only with a reproducible benchmark that identifies hardware, file size, software versions, and method. A tool’s own benchmark option does not establish a fair ranking across tools.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
