Release integrity: SHA-256 checks and official channels
Short answer: The SHA-256 of every release installer is published on the download page and in the changelog, and language packs are also checked against SHA-256 on download and import. The current version is not yet code-signed, so please check the file with SHA-256 and download only from this site.
Code signing
The current version is not yet code-signed. Windows SmartScreen may show a warning when you run it; first check the SHA-256 as described below, and only once it matches choose “More info → Run anyway”. When we start signing, we will publish the signer name and certificate thumbprint on this page and in the changelog.
SHA-256
- The download page lists the file name, size and SHA-256 of the current version;
- The changelog lists the SHA-256 of every earlier version;
- For how to check, see How to verify a downloaded installer.
Language packs
Each recognition language pack file has a fixed SHA-256. It is checked both for online downloads and for imports from file; a pack that does not match is not installed.
Update checks
This site publishes a public version manifest (new version number, download address and SHA-256) for future update checks to read. The current version of the software does not check for updates automatically yet.
Official channels
Download only from this site. Installers repackaged by third-party download sites may have been modified, and their SHA-256 will also differ. If you find a download site using this software’s name without permission, please tell us.
Third-party components
For the third-party components, recognition models and fonts in each version, see Third-party components and SBOM.