diff --git a/conf/client.conf b/conf/client.conf
index 934eaaa18..b904deb89 100644
--- a/conf/client.conf
+++ b/conf/client.conf
@@ -56,7 +56,7 @@ files-backup = false
 # Default parameter if unset: sha1 sha256 sha512 gpg
 # PLEASE NOTE: to fully disable GPG feature, please have a look at the
 # "gpg" option below.
-package-hashes = sha1 gpg
+package-hashes = sha256 gpg
 
 # GnuPG repository and packages verification feature.
 # Valid parameters: disable, enable, true, false, disabled, enabled, 0, 1