# Supply checksum when downloading gradle

**URL:** <https://discuss.gradle.org/t/supply-checksum-when-downloading-gradle/18215>\
**Category:** Help/Discuss\
**Created:** [June 23, 2016, 6:41pm UTC](https://discuss.gradle.org/t/supply-checksum-when-downloading-gradle/18215 "2016-06-23T18:41:12Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![johnscancella](https://avatars.discourse-cdn.com/v4/letter/j/e79b87/32.png) [@johnscancella](https://discuss.gradle.org/u/johnscancella)\
**Post date:** [June 23, 2016, 6:41pm UTC](https://discuss.gradle.org/t/supply-checksum-when-downloading-gradle/18215/1 "2016-06-23T18:41:12Z")

</div>

Would it be possible to provide the MD5 and SHA1 checksum of gradle on the downloads page? Otherwise I have no way to verify that the gradle zip I have is correct or untampered with.

---

<div class="post-metadata">

**Author:** ![eljobe](https://sea1.discourse-cdn.com/gradle/user_avatar/discuss.gradle.org/eljobe/32/4290_2.png) [@eljobe](https://discuss.gradle.org/u/eljobe)\
**Post date:** [September 18, 2017, 8:11am UTC](https://discuss.gradle.org/t/supply-checksum-when-downloading-gradle/18215/2 "2017-09-18T08:11:51Z")

</div>

We now publish sha256 checksums with every release. We’ve also backfilled the data for older releases.

- [https://gradle.org/install](https://gradle.org/install)
- [https://gradle.org/releases](https://gradle.org/releases)
- [https://gradle.org/release-candidate](https://gradle.org/release-candidate)
- [https://gradle.org/nightly](https://gradle.org/nightly)
- [https://services.gradle.org/distributions](https://services.gradle.org/distributions)
- [https://services.gradle.org/distributions-snapshots](https://services.gradle.org/distributions-snapshots)