One vault, three platforms

Verify your download

Every release is published with a manifest listing each file's SHA-256, signed by a key that never touches this web server. Three ways to check, in increasing order of how little you have to trust us:

1 · By hand. Compare against the checksum shown beside the release above:

# Windows (PowerShell)
Get-FileHash .\Keepsake-win-Setup.exe -Algorithm SHA256

# macOS / Linux
sha256sum Keepsake-win-Setup.exe

2 · In your browser. Drop the file on the verify page and it is hashed locally and looked up in the signed manifest.

3 · Without trusting this website at all. From a copy of Keepsake you already had installed:

Keepsake.exe --verify Keepsake-win-Setup.exe

Options 1 and 2 both take the checksum from this server, so a compromise of the server could defeat them — we would rather say that than imply otherwise. Option 3 checks the manifest's signature against the release public key compiled into a binary that was on your machine before this download existed. That key is also printed on the security page; note it down once and you can verify any future release by hand, forever, without us.

Windows installers are not yet code-signed, so Windows will show an "unrecognised app" warning on first run. That is a statement about a certificate we have not bought, not about the file — which is exactly why the checks above exist.