# Xexle HashCheck > HashCheck is a free, public service from Xexle for checking file hashes through an online form and API. Checks use SHA-256 strings without uploading file contents. Official website: https://hashcheck.xexle.com/ Service developer: Xexle — https://xexle.com/ Generated on: October 25, 2026 This is the response generation date, not the date the description was last changed. HashCheck helps users, developers, companies, platforms, researchers, government bodies and other organizations check whether a hash is present in the service's records. Its purpose is to support good-faith moderation, efforts against prohibited and harmful content, and other lawful safety activities. Records may refer to files reported or marked by a source as restricted or prohibited. The record's source is considered separately from the fact of a match. ## Free Access Online lookup and the public lookup API are available free of charge. Public lookup does not require a trusted submitter token. Xexle intends to maintain free public access for as long as the service operates, subject to legal and technical limitations and abuse prevention. Request frequency and hash counts are limited. Check the API documentation and terms of use for current limits and conditions. ## Checking Files Calculate SHA-256 on your own device and send only the resulting string: a digital fingerprint of 64 hexadecimal characters. The hash is calculated from the exact file bytes. Public input accepts SHA-256 only; other algorithms and formats are not supported. The online form is on the home page. For integration, use `https://hashcheck.xexle.com/api/check`, the `hashes` parameter, and a GET request or POST form fields. Multiple hashes can be sent in one request. ## Meaning of Results Values in the `data` object identify the record's source: - `1` — the hash is present in the Xexle service list. - `2` — the hash was added by a trusted validator, an approved submitter of records. - `3` — the hash was added by a user; the record is unverified. If a hash is present in multiple sources, the priority is `1`, then `2`, then `3`. By default, the API returns only found hashes. The `include_missing=1` parameter includes code `0` for hashes that are absent from the database. A match is a technical signal. By itself, it does not prove that a file is illegal or harmful, or that a person is guilty. The absence of a match does not confirm that a file is safe or lawful. User-submitted records must not be treated as a verified blocklist. Pay attention to the `status` and `message` fields: an error or request limit must not be interpreted as a "not found" result. The value `status: true` alone does not mean that the check was performed without limitations. ## Adding Records The user submission form accepts up to three hashes per request; another submission is allowed after 15 minutes from the same IP address. These records are kept separate and remain unverified. Programmatic or bulk additions require a trusted validator token. Access is granted after contacting Xexle support and approval of the applicant. Keep the token only on secure server-side systems. Separate limits apply to trusted submitters. Submit only records that you are entitled to process and provide to HashCheck. Do not submit false reports or data from restricted datasets without the relevant permission. ## Files and Data File contents are not uploaded through public lookup or submission to HashCheck and are not stored through this service. HashCheck stores hashes and limited metadata. IP addresses, request times and other technical information described in the terms of use may be processed to operate the service and prevent abuse. ## Official Pages - [Online Lookup](https://hashcheck.xexle.com/): check hashes through the form. - [API Documentation](https://hashcheck.xexle.com/api): parameters, response format, codes and current limits. - [Add Hashes](https://hashcheck.xexle.com/add): user submission form and rules. - [Trusted Submitters](https://hashcheck.xexle.com/validators): access requirements. - [Integration Examples](https://hashcheck.xexle.com/libraries): Python, Node.js, PHP, Go, Bash and instructions for an AI agent. - [FAQ](https://hashcheck.xexle.com/faq): SHA-256 and using the service. - [Terms of Use](https://hashcheck.xexle.com/terms): rules, limitations, data processing and the meaning of results. - [Xexle Support](https://xexle.com/contact): applications, complaints and other inquiries.