Cryptographic release verification

Know the file is official before you run it.

Choose a download or paste its SHA-256. Your file stays on your device while Protect checks the fingerprint against an Ed25519-signed developer manifest.

Private by design

Only the calculated fingerprint is checked. The selected file is never uploaded.

01

Verify a downloaded file

Fastest and safest: calculate the fingerprint here without sending the file anywhere.

02

Or check a known fingerprint

Paste the SHA-256 supplied by the developer or your own hashing tool.

Prefixes such as SHA256: are accepted.
What Protect checks

Three signals. One clear result.

1

Exact fingerprint

The file’s SHA-256 must match the registered release byte-for-byte.

2

Signed manifest

The release record must pass its Ed25519 signature check.

3

Verified publisher

The manifest must belong to a developer and resource verified by Protect.

A successful result confirms an exact registered release. An unknown result is not automatically proof of malware or leaking. Protect does not inspect, execute, retain, or upload your file.

View the public signing key Key 1846eb01ab40e84a