[GUIDE] MD5sums: What they are...and how to verify them!

Search This thread

xCALLmeKING

Senior Member
Feb 12, 2010
146
38
WA
What is an MD5sum?

An MD5sum is a commonly used hash value that is created to verify the integrity of files. Here at XDA-developers, MD5sum values are provided by developers to allow users to verify that a file download is not corrupt or been altered.

This is a security feature that XDA users are provided with to verify the integrity of downloaded files for personal use.

DISCLAIMER!: PROCEED WITH CAUTION! I AM NOT RESPONSIBLE FOR ANY DAMAGE CAUSED TO DEVICES! ALWAYS VERIFY THAT MD5SUM VALUES MATCH PRIOR TO OPENING A DOWNLOADED FILE!!! YOU SHOULD NEVER USE/OPEN A DOWNLOADED FILE IF THE MD5SUMS DO NOT MATCH!!! USE/OPENING OF A CORRUPT FILE CAN LEAD TO DEVICE MALFUNCTIONS AND/OR FAILURES!!!



How to verify an MD5sum!

These steps are for Windows-based systems. HashTab is available for Mac OS.

There are a number of freeware programs available over the internet. Simply entering "Free MD5sum checker" on Google provides a number of results.


Step 1: Download an MD5sum checker

I recommend:

Left-click name for download link

HashTab (Proceed to "HashTab Step 2")
or
MD5 Checker (Proceed to "MD5 Checker Step 2")


-------------------------------------------------------------------------------------------------------------------------------------

HashTab Step 2: Run HashTab Installer

Upon download completion of HashTab, you will be asked to run the HashTab Installer. Left-click on "Run"


HashTab Step 3: Doing an MD5sum Check

Upon installation completion, you can begin checking MD5sums of downloaded files.

1. Download a file. Note the download location of the file. (Note: Most XDA developers provide the MD5sum with the download link).

2. Navigate to the file's location.

3. Right-click the file. Left-click on "Properties".

4. You will notice the Properties window now has a new tab at the top labeled "File Hashes". Left-click "File Hashes".

The hash values will be computed. The user can compare the MD5sum value with the developer provided value. If the MD5sum values match, the file is safe. If MD5sum discrepancies are found, the file is to be considered corrupt and should be removed.


-------------------------------------------------------------------------------------------------------------------------------------

MD5 Checker Step 2: Unzip the "MD5" folder

Upon download completion of MD5 Checker, navigate to the location of the "MD5" zip folder. Right-click the "MD5" zip folder. Left-click on "Extract All". Note the location of the extracted files. Optional: Open the unzipped MD5 file and simply click-n-drag the MD5 application file to your Desktop for easier access.


MD5 Checker Step 3: Doing an MD5sum Check

1. Download a file. Note the download location of the file (Note: Most XDA developers provide the MD5sum with the download link). Highlight and copy [Ctrl + C] the developer provided MD5sum value.

2. Double-click the "MD5" application file. You will be asked if you trust the unverified publisher. Left-click "Run". A new window with two open fields will display.

3. The first field is where you input the developer provided MD5sum value. Left-click "Paste". The MD5sum value you copied should display.

4. The second field is where you input the location of the downloaded file. Left-click "Browse". Navigate to the download location of the file and double-click it.

The MD5 application will compute the MD5sum value of the downloaded file. This value will be compared to the MD5sum value the developer provided. If the values match, the file is safe. If MD5sum discrepancies are found, the file is to be considered corrupt and should be removed.


ALL CREDIT GOES TO THE DEVELOPERS OF THESE MD5SUM CHECKING APPLICATIONS. THANKS FOR KEEPING OUR DEVICES SAFE.

If you have any additional tips or suggestions on MD5sum Verification please feel free to share them with the rest of the XDA community.
 
Last edited:

SiL3nTKiLL

Senior Member
Jun 19, 2006
1,945
66
bookmarked!!!
signature_amazon.jpg

signature_buycom.jpg

signature_itunes.jpg

signature_bestbuy.jpg

signature_1800petmeds.jpg
 

disgustip8ted

Senior Member
Mar 2, 2010
355
8
nice, ive been using md5 checking in my downloads for ages, nice write up for nubs, we all start somewhere :D
 

BrotherG

Senior Member
Aug 12, 2007
180
12
This should be required for any attached apps on xda, for posters/devs to add the md5 along with the app
 

xCALLmeKING

Senior Member
Feb 12, 2010
146
38
WA
This should be required for any attached apps on xda, for posters/devs to add the md5 along with the app

I agree. I am hoping that by providing this MD5sum guide to the community, members and developers will have a greater interest in file integrity. I don't think that it is asking too much to have developers provide MD5sum values. This would make the XDA experience safer and more enjoyable for everyone.

I can verify that MD5sum checking has saved me a couple times from a corrupt download. I feel the need for file integrity checks is necessary. Better safe than sorry.

If everyone did their part in asking for MD5sum values for all file downloads, this would become a popular and safe trend.
 

theFluff

New member
Jun 22, 2010
1
0
Dublin
I agree. I am hoping that by providing this MD5sum guide to the community, members and developers will have a greater interest in file integrity. I don't think that it is asking too much to have developers provide MD5sum values. This would make the XDA experience safer and more enjoyable for everyone.

I can verify that MD5sum checking has saved me a couple times from a corrupt download. I feel the need for file integrity checks is necessary. Better safe than sorry.

If everyone did their part in asking for MD5sum values for all file downloads, this would become a popular and safe trend.

Couldn't agree more! You can really save yourself a lot of troubleshooting by simply checking the MD5Sum first of all.

If you want something "smallish" to use instead, feel free to use the attached little tool (req .NET framework 2.0 in Win), just drag and drop the file(s) on the executable and it'll spit out the MD5sum(s). Most Unix/Linux-flavors should have a tool called md5sum (just type "md5sum [file]" in the shell), and BSD-like systems should have a similar tool simply called "md5" (this including OSX).

I attached the source as well, nothing complicated, just a 5min-job. The .cs-files should compile fine using Mono in most Mono-supported OS's (including Linux and OSX). I don't have access to my Linux- nor my OSX-machines right now, so can't confirm.
 

Attachments

  • MiniHasher_1.0.0.zip
    46.5 KB · Views: 97
  • MiniHasher_1.0.0_src.zip
    46.5 KB · Views: 51

BodyMarks

Member
May 4, 2010
10
1
I am a noob to md5sum, could you tell me where/how exactly you get the downloaded file's md5? Thanks for the info.
 

Rendarion

Member
Apr 23, 2010
16
0
Or you can do it directly on your Android device with ManD5 (free app available).
 
Last edited:

THE.W!ZARD

Senior Member
Jun 6, 2012
477
49
Cairo
Thank You For This Awesome Tutorial. Why MD5 Checker Always Reports Codes Didn't Match Although They Are The Same?
 

muzaffarkhan95

Senior Member
Sep 30, 2013
362
143
nexus 4

i am a Nexus 4 user!
i just flashed a rom via TWRP for the first time and i was like CHECKING MD5sum then.... SKIPPING MD5 : MD5 sum not found.
it never happend to me in CWM!!
iz it normal or i need to fix it????
 

Top Liked Posts

  • There are no posts matching your filters.
  • 10
    What is an MD5sum?

    An MD5sum is a commonly used hash value that is created to verify the integrity of files. Here at XDA-developers, MD5sum values are provided by developers to allow users to verify that a file download is not corrupt or been altered.

    This is a security feature that XDA users are provided with to verify the integrity of downloaded files for personal use.

    DISCLAIMER!: PROCEED WITH CAUTION! I AM NOT RESPONSIBLE FOR ANY DAMAGE CAUSED TO DEVICES! ALWAYS VERIFY THAT MD5SUM VALUES MATCH PRIOR TO OPENING A DOWNLOADED FILE!!! YOU SHOULD NEVER USE/OPEN A DOWNLOADED FILE IF THE MD5SUMS DO NOT MATCH!!! USE/OPENING OF A CORRUPT FILE CAN LEAD TO DEVICE MALFUNCTIONS AND/OR FAILURES!!!



    How to verify an MD5sum!

    These steps are for Windows-based systems. HashTab is available for Mac OS.

    There are a number of freeware programs available over the internet. Simply entering "Free MD5sum checker" on Google provides a number of results.


    Step 1: Download an MD5sum checker

    I recommend:

    Left-click name for download link

    HashTab (Proceed to "HashTab Step 2")
    or
    MD5 Checker (Proceed to "MD5 Checker Step 2")


    -------------------------------------------------------------------------------------------------------------------------------------

    HashTab Step 2: Run HashTab Installer

    Upon download completion of HashTab, you will be asked to run the HashTab Installer. Left-click on "Run"


    HashTab Step 3: Doing an MD5sum Check

    Upon installation completion, you can begin checking MD5sums of downloaded files.

    1. Download a file. Note the download location of the file. (Note: Most XDA developers provide the MD5sum with the download link).

    2. Navigate to the file's location.

    3. Right-click the file. Left-click on "Properties".

    4. You will notice the Properties window now has a new tab at the top labeled "File Hashes". Left-click "File Hashes".

    The hash values will be computed. The user can compare the MD5sum value with the developer provided value. If the MD5sum values match, the file is safe. If MD5sum discrepancies are found, the file is to be considered corrupt and should be removed.


    -------------------------------------------------------------------------------------------------------------------------------------

    MD5 Checker Step 2: Unzip the "MD5" folder

    Upon download completion of MD5 Checker, navigate to the location of the "MD5" zip folder. Right-click the "MD5" zip folder. Left-click on "Extract All". Note the location of the extracted files. Optional: Open the unzipped MD5 file and simply click-n-drag the MD5 application file to your Desktop for easier access.


    MD5 Checker Step 3: Doing an MD5sum Check

    1. Download a file. Note the download location of the file (Note: Most XDA developers provide the MD5sum with the download link). Highlight and copy [Ctrl + C] the developer provided MD5sum value.

    2. Double-click the "MD5" application file. You will be asked if you trust the unverified publisher. Left-click "Run". A new window with two open fields will display.

    3. The first field is where you input the developer provided MD5sum value. Left-click "Paste". The MD5sum value you copied should display.

    4. The second field is where you input the location of the downloaded file. Left-click "Browse". Navigate to the download location of the file and double-click it.

    The MD5 application will compute the MD5sum value of the downloaded file. This value will be compared to the MD5sum value the developer provided. If the values match, the file is safe. If MD5sum discrepancies are found, the file is to be considered corrupt and should be removed.


    ALL CREDIT GOES TO THE DEVELOPERS OF THESE MD5SUM CHECKING APPLICATIONS. THANKS FOR KEEPING OUR DEVICES SAFE.

    If you have any additional tips or suggestions on MD5sum Verification please feel free to share them with the rest of the XDA community.