diff --git a/tasks/client.yml b/tasks/client.yml
index 059972e..2ad9365 100644
--- a/tasks/client.yml
+++ b/tasks/client.yml
@@ -6,6 +6,7 @@
     owner: "root"
     group: "root"
     mode: 0755
+    checksum: "sha256:{{ minio_client_checksum }}"
   register: _download_client
   until: _download_client is succeeded
   retries: 5
diff --git a/tasks/preflight.yml b/tasks/preflight.yml
index a6fd1a6..7fc2153 100644
--- a/tasks/preflight.yml
+++ b/tasks/preflight.yml
@@ -1,12 +1,22 @@
 ---
-- name: Compose Minio download url
-  set_fact:
-    minio_server_download_url: "https://dl.minio.io/server/minio/release/linux-{{ go_arch_map[ansible_architecture] | default(ansible_architecture) }}/minio"
+- block:
+    - name: Compose Minio download url
+      set_fact:
+        minio_server_download_url: "https://dl.minio.io/server/minio/release/linux-{{ go_arch_map[ansible_architecture] | default(ansible_architecture) }}/minio"
+
+    - name: "Minio server checksum for {{ go_arch_map[ansible_architecture] | default(ansible_architecture) }} architecture"
+      set_fact:
+        minio_server_checksum: "{{ lookup('url', minio_server_download_url + '.sha256sum').split(' ')[0] }}"
   when:
     - minio_install_server
 
-- name: Compose MC download url
-  set_fact:
-    minio_client_download_url: "https://dl.minio.io/client/mc/release/linux-{{ go_arch_map[ansible_architecture] | default(ansible_architecture) }}/mc"
+- block:
+    - name: Compose MC download url
+      set_fact:
+        minio_client_download_url: "https://dl.minio.io/client/mc/release/linux-{{ go_arch_map[ansible_architecture] | default(ansible_architecture) }}/mc"
+
+    - name: "Minio client checksum for {{ go_arch_map[ansible_architecture] | default(ansible_architecture) }} architecture"
+      set_fact:
+        minio_client_checksum: "{{ lookup('url', minio_client_download_url + '.sha256sum').split(' ')[0] }}"
   when:
     - minio_install_client
diff --git a/tasks/server.yml b/tasks/server.yml
index ed0b5cd..9a795bb 100644
--- a/tasks/server.yml
+++ b/tasks/server.yml
@@ -27,6 +27,7 @@
     owner: "root"
     group: "root"
     mode: 0755
+    checksum: "sha256:{{ minio_server_checksum }}"
   register: _download_server
   until: _download_server is succeeded
   retries: 5