Verifying Downloads
Compare SHA-256 checksums and verify the publisher before installation.
Calculate SHA-256 locally
Use the actual downloaded filename in the command for your operating system, then compare every hexadecimal character against the value published in the download center.
On macOS, use the Intel (amd64) or Apple Silicon (arm64) filename that matches your download. Do not run a package if its checksum differs.
# Windows PowerShell
Get-FileHash ".\WalletRecovery-windows-amd64.exe" -Algorithm SHA256
# Linux
sha256sum "./WalletRecovery-linux-amd64"
# macOS Intel
shasum -a 256 "./WalletRecovery-darwin-amd64"
# macOS Apple Silicon (M series)
shasum -a 256 "./WalletRecovery-darwin-arm64"Verify publisher identity
A checksum detects file differences but does not establish who published the file. On Windows review the Digital Signatures tab, if present, and use Get-AuthenticodeSignature. On macOS review code-signing information and Gatekeeper assessment.
On Linux, use detached-signature instructions and a signing-key fingerprint from a trusted independent source if supplied. Code-signing, detached signatures, and notarization details have not been supplied for the current downloads.
Stop on unexpected warnings
Do not disable antivirus, Gatekeeper, or other security controls to install an unverified package. Consult the verification guide or support instructions.
Never share recovery phrases, private keys, wallet passwords, wallet files, or password dictionaries. Prepare a sanitized support report if you need help.