Software publishers often list a checksum (a SHA-256 hash) next to a download. Run the downloaded file through here, compare the result, and you will know it arrived intact and untampered. The file never leaves your device.
Everything runs locally in your browser using the built-in Web Crypto API. Nothing is uploaded. A matching SHA-256 means the file is byte-for-byte what the publisher released.
One short email when we publish something useful. No spam, no fearmongering. Unsubscribe anytime.