Lion Cipher Lab

Hash a file and verify a download

Why it matters

Verifying a download is a real security habit you can start using today, not a classroom exercise. Every serious project — operating systems, security tools, developer software — publishes a checksum next to its download so you can prove the file you got is the genuine, unmodified one. Attackers have repeatedly tried to slip tampered installers past people who skip that check. Learning to compute and compare a hash in thirty seconds is one of the highest-leverage safety skills a beginner can pick up, and it's the same move the Kali lab used, generalized to anything you'll ever download.

What you'll learn

Steps in this lab

  1. What a hash actually is — a one-way fingerprint
  2. Compute your first hash
  3. Change one character and watch the fingerprint shatter
  4. Verify a real download against its published checksum
  5. Hashing is not encryption — keep them straight

Open the full interactive lab →