Error AtlasError Documentation and Resolution
Back to searchMore pip errors

pip

pip require-hashes mode failed because dependencies were missing hashes

In --require-hashes mode, all requirements and dependencies must be hashed.

pip refused to continue in hash-checking mode because not every dependency was explicitly listed and hashed, which would weaken repeatable install guarantees.

--require-hashessecurity

Observed message

In --require-hashes mode, all requirements and dependencies must be hashed.

Why it happens

  • One or more transitive dependencies are not listed with hashes in the requirements file.
  • Hash-checking mode was activated by a --hash entry or by --require-hashes.
  • The requirements file is only partially converted to a fully hashed repeatable install format.

How to fix it

  1. List every dependency explicitly in the requirements file and include hashes for each one.
  2. Use pip's hash-checking workflow consistently rather than mixing hashed and unhashed dependencies.
  3. Regenerate the file carefully when dependency versions change so the hash set stays complete.

Official reference

Secure installs

Related errors

--require-hashespip require-hashes mode failed because requirements were not fully pinnedNo matching distribution foundpip cannot find a compatible package versionResolutionImpossiblepip cannot resolve conflicting dependency requirementsrequires <package>, which is not installedpip check found a missing required package

Explore more

pipBrowse more pip errorssecurityBrowse more security errors
pip --require-hashes all dependencies must be hashed | Error Atlas