Repository navigation
A big rework under the hood: faster hashing, standard checksum files, a command-line tool, a Linux build and a long list of fixes.
Added
- Checksum files: save all hashes as one
SHA256SUMS-style file (GNU, BSD tagged, SFV, JSON or CSV), and verify any checksum file:sha256sum/md5sumoutput, BSD tagged lists,.sfv, xxhsum (XXH3_prefix) and single-hash files such asimage.iso.sha256. Dropping a checksum file on Verify loads every file it lists. - Command-line tool
hashtoolfor Windows, macOS and Linux:hashtool hash,hashtool verify(likesha256sum -c),hashtool checkandhashtool algorithms. - Linux (AppImage) and Intel Mac builds.
- Open files from the system: optional Explorer context menu on Windows ("Generate hash with Hash Tool", "Verify with Hash Tool"), "Open With" on macOS and
--create/--verifycommand-line arguments. A second launch hands its files to the window that is already open. - Settings for files processed at the same time, hard-drive mode, hidden files, hash letter case, default checksum file format and the automatic update check.
- Updates: optional automatic check (at most once a day), release notes, cancellable download, install now or when closing the app.
- "Restart as Administrator" (Windows) when files cannot be read, keeping the file list.
- Developer console: level filter, auto-scroll and export.
- Keyboard shortcuts: Ctrl/⌘+O (add files), Ctrl/⌘+Shift+O (add folder), Ctrl/⌘+F (search), Ctrl/⌘+Enter (run all), Esc (cancel), Delete (remove).
- The window remembers its size and position.
Changed
- CRC32 is shown in the standard byte order used by 7-Zip, SFV files and
cksum: "123456789" now givesCBF43926(1.1 showed2639F4CB). CRC32 values saved by 1.1 still verify and are marked as using the old byte order. - New hashing engine: each file is read once for all selected algorithms, with large double-buffered reads, and several files are hashed at once (large files in their own lane). In benchmarks SHA-256 of a large file is about 1.7× faster than a plain single-buffer read, and 2,000 small files finish about 3.5× faster than one at a time.
- Adding folders scans in the background, skips unreadable folders and symbolic-link loops, and no longer freezes the window.
- Settings are written safely; a damaged settings file is backed up and reset instead of breaking the app. The chosen language is saved right away.
- Daily log files with ISO timestamps (kept 14 days), user folder names masked, and crash reports.
- Statuses, filters and dialogs follow the selected language immediately, including right-to-left layouts. Automatic language detection picks the right variant (Traditional Chinese for Taiwan and Hong Kong, Latin American Spanish, Norwegian, British English for Australia and others).
- The colour-blind and high-contrast themes also recolour statuses.
- Updated to Avalonia 12, the .NET 10.0.13 runtime, Velopack 1.2 and current versions of every library.
Fixed
- Crash when dropping a folder.
- The app closing on unexpected errors, such as saving into a read-only folder; errors are now shown in a dialog.
- Single-letter shortcuts (Shift+A/C/Z) firing while typing.
- The search highlight showing the end of a file name twice.
- Split archives (
.001,.7z.002) being mistaken for hash files. - "Invalid" when loading a hash file that does not name the file, such as
SHA256SUMS. - The expected hash getting lost when a file and its hash file were dropped together.
- Calendar and number formatting in logs for some languages (Thai, Arabic, Turkish).
- Missing, untranslated or misaligned text in several dialogs and languages; the Filipino translation is complete.
Removed
- The Free Memory button, Force Quit and its timeout setting.
- Starting as administrator automatically (replaced by "Restart as Administrator" when it is needed).
- The developer (pre-release) update channel and its disclaimer.
Security
- Removed the vulnerable Tmds.DBus.Protocol version (GHSA-xrw6-gwf8-vvr9) through the Avalonia upgrade.
- Checksum files cannot point to network (UNC) or device paths, and exported CSV files cannot inject spreadsheet formulas.
- Releases are built and tested in GitHub Actions, with
SHA256SUMS, SBOMs and build provenance attestations; every pull request is scanned for vulnerable packages, licences and secrets.