Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

How can I check the integrity of downloads?

more options

I would like to verify the checksums of downloaded files when the download has finished, using a variety of checksum algorithms such as MD5, SHA512, ...

Before Firefox 20, that used to be possible without any problems with the MD5 Reborned Hasher add-on (see http://addons.mozilla.org/en-US/firefox/addon/md5-reborned-hasher/), which integrates itself into the Downloads UI. As of Firefox 20, a new Downloads UI was made the default, but the old one could still be enabled with the browser.download.useToolkitUI setting. As of Firefox 26, however, the old UI is not included in Firefox any more, hence Firefox 26 broke the MD5 Reborned Hasher add-on as it cannot be accessed any more.

Thus, how can I either use that add-on in Firefox 26, or what equivalent functionality does Firefox 26 offer?

I would like to verify the checksums of downloaded files when the download has finished, using a variety of checksum algorithms such as MD5, SHA512, ... Before Firefox 20, that used to be possible without any problems with the MD5 Reborned Hasher add-on (see http://addons.mozilla.org/en-US/firefox/addon/md5-reborned-hasher/), which integrates itself into the Downloads UI. As of Firefox 20, a new Downloads UI was made the default, but the old one could still be enabled with the browser.download.useToolkitUI setting. As of Firefox 26, however, the old UI is not included in Firefox any more, hence Firefox 26 broke the MD5 Reborned Hasher add-on as it cannot be accessed any more. Thus, how can I either use that add-on in Firefox 26, or what equivalent functionality does Firefox 26 offer?

All Replies (3)

more options

If you use this feature frequently and can't find another add-on that makes it easy, you could consider switching to the "ESR" version of Firefox, which is designed for organizations that require long-term feature stability. The ESR version is currently based on Firefox 24 and gets security updates when the regular version of Firefox gets full updates. More information: http://www.mozilla.org/firefox/organizations/.

more options

Downloading and burning Linux or Windows ISO images for example with a single flipped bit can cause system instability nearly impossible to track down, and not otherwise detectable. An MD5 checksum (OR SHA) check will quickly detect any such transmission errors. Not something anyone I know bothers to use unless it's important data. The temporary fix of changing the about:config setting, then expanding to full screen in downloads was working. But now, based on my interpretation of comments made on the authors Sourceforge page, Firefox has made updates that prevent the MD5 Reborned Hasher from working in Firefox at all. If that's true, I would really like to know the reason. With all this talk of NSA spying, I would think more people would be interested in making sure someone isn't tampering with their downloads. I have no idea. But I do believe the wonderful volunteers at Firefox need to figure out a way to make this valuable piece of security software whole again. Thank You.

PS: For those needing to verify a file, you might want to try the "Microsoft File Checksum Integrity Verifier" kb841290 . It's old, but does large file MD5 from a command prompt.

more options

Hi Suncoast, the initial problem was that all extensions which modified the UI of the old Download Manager window became obsolete starting in Firefox 26 (or if you stuck with the default settings, in Firefox 20). There might be a way to integrate it into the new downloads list, or the recently released extension which creates a different download window, but I don't know whether anyone is working on it.