Instructions will ensure the downloaded files really came from us. Signing files with any other key will give a different signature. This contains an OpenPGP (GPG) signature created with one of our release keys. Verifying Releases via PGP - Linux, macOS, and WindowsĪ more thorough check can be made using the *.sig sidecar file. To open KeePassXC after the installation if the signature check fails. The macOS release is signed with our Apple Developer ID, which is checked by the operating system on launch. Then follow the verification instructions below. To verify the portal ZIP file, you must download and install Gpg4win.

You should see the following dialog with DroidMonkey Apps, LLC as the verified publisher: The Windows MSI installation file is protected by an authenticode signature, this means that authenticity andĬhecks are verified directly by Windows when you run the program.

a self-contained executable *.AppImage for GNU/Linux.Įach of these package files has two related sidecar files, a *.sig containing a PGP signature andĪ *.DIGEST containing the SHA-256 hash for basic integrity checks.

an *.msi installer and a *.zip archive with binaries for Windows.

a *.dmg drag-and-drop installer for macOS.This guarantees that the file you just downloaded was originally created by the KeePassXC Team and that itsĬontents haven't been tampered with on the way.Ī more detailed explanation is available in the Qubes-OSĮvery KeePassXC release is published in a variety of package formats: By verifying the signatures of KeePassXC releases, you can prove the authenticity and

Keepassxc touchid