Skip to content
Skip to content

It is a 64-character SHA-256 code computed from the file exactly as it arrived, so a copy of the file in your hands can be checked against it.

The fingerprint is on the details panel of every document you open, in the row Fingerprint · SHA-256. It is computed from the file's contents when your client uploads it, before we encrypt it for storage. It is kept with the document and written into your proof record when your client submits it. The same code is listed in the manifest of an export.

The panel shows the code in groups of eight characters so it is easy to read. Copy puts the whole code on your clipboard as one unbroken string.

To check a file, download it and compute its fingerprint on your computer. Then compare the result with the one in the panel.

Mac:      shasum -a 256 "<the file>"
Windows:  certutil -hashfile "<the file>" SHA256

The two match only when the file is exactly the file that arrived. A change of a single byte gives a completely different code. Opening a file and saving it again can change it, so compare the downloaded file itself. What the fingerprint shows and does not show has its own page.

For example

Anita Deshpande uploads her PAN card for Amaltas Deshmukh & Co. The folder shows a fingerprint for it, taken from the file exactly as she sent it. Later she replaces the scan with a clearer one. The old file is destroyed and the folder shows the new file with a new fingerprint. The old fingerprint stays in the proof record, in the entry that records the replacement.