check for secure hash