Howto: Verify Downloaded Linux / BSD DVD or CD ISO images for integrity

last updated in Categories CentOS, Debian Linux, Howto, Linux, Linux distribution, RedHat/Fedora Linux, Security, Sys admin, Tip of the day, Ubuntu Linux, UNIX

You need to verify that that downloaded Linux DVD or ISO images are intact before you burn and use them. This is security feature. But how do you verify ISO images?


Answer is quite simple use md5sum command to compute and check MD5 message digest.

Why verify ISO images?

a) To protect yourself
b) Verify that a file has not changed as a result of file transfer, disk error, cracker attacks, etc.

How does it work?

When you run md5sum command on ISO file, you get checksum (or hash) on screen. You need to compare this checksum with original. It works as a compact digital fingerprint of a file. You can then compare the MD5 hash of your download ISO file, to the known good hash of the file you are checking. If the two values match, you are safe and use the ISO image.


Let us download FreeBSD ISO image:
$ cd /tmp
$ wget

Next download MD5 checksum:
$ wget

Generate MD5 hash for ISO image

$ md5sum 6.2-RELEASE-i386-bootonly.iso

4e8701ac951bc4537f8420fdac7efbb5  6.2-RELEASE-i386-bootonly.iso

Verify ISO image

See the known good hash of the file (6.2-RELEASE-i386-bootonly.iso):
$ md5sum -c CHECKSUM.MD5

6.2-RELEASE-i386-bootonly.iso: OK

You can also use following command for the same purpose:

A note for Windows XP / Vista users


Posted by: Vivek Gite

The author is the creator of nixCraft and a seasoned sysadmin, DevOps engineer, and a trainer for the Linux operating system/Unix shell scripting. Get the latest tutorials on SysAdmin, Linux/Unix and open source topics via RSS/XML feed or weekly email newsletter.

4 comment

  1. I am a beginner to linux. I want to master linux and gnu C. I would like to get some tips for that from experienced people like you. Please help me in this regard

    Thanks in advance

  2. I know this article has been posted for a while but can you please help me understand the situation I’m facing?

    I tried using the method above to verify my FreeBSD 7 download from “”.

    1st time using firefox 3, 2nd time with a firefox download manager “downloadthemall” and third time using wget.

    For all 3 downloads all checksums were different and didn’t match the CHECKCUM.MD5 provided at “”.

    Makes me wonder if the difference are caused either by different download methods or corrupted downloads.

  3. What about checking a dvd itself? I once burned slack 13 32bit to a dvd with growisofs, and it seemed to be corrupted, it gave me an error about glibc… I was trying to use XFS, it seems to be the best choice and has worked well for me.

    Have a question? Post it on our forum!