# ERROR: THESE PACKAGES DO NOT MATCH THE HASHES FROM THE REQUIREMENTS FILE. If you have updated the package versions, update the hashes. Otherwise, remove the file.

- **ID:** `python/pip-package-hash-mismatch`
- **Domain:** python
- **Category:** install_error
- **Verification:** ai_generated
- **Fix Rate:** 80%

## Root Cause

The downloaded package hash does not match the hash specified in a requirements file with --hash constraints.

## Version Compatibility

| Version | Status | Introduced | Deprecated |
|---------|--------|------------|------------|
| 3.10 | active | — | — |

## Workarounds

1. **Update hashes in requirements file** (90% success)
   ```
   pip hash package.whl
# Update the hash in requirements.txt
   ```
2. **Regenerate requirements file with hashes** (85% success)
   ```
   pip freeze --hash > requirements.txt
   ```

## Dead Ends

- **Ignoring hashes with --no-hash-check** — Bypasses security checks; may install malicious package. (40% fail)
- **Re-downloading the same package** — Hash mismatch persists if package was updated on server. (80% fail)
