How to check the integrity of the downloaded packages
- Open command prompt or terminal depending on your OS.
- Navigate to the directory in which the downloaded file exists.
- Based on the operating system you are using, execute the command mentioned. The sample output is mentioned after each command
C:\Users\YourUser\Downloads> CertUtil -hashfile tagspaces-win-x64-5.0.3.exe SHA256 SHA256 hash of tagspaces-win-x64-5.0.3.exe: c3beb23e2621132498cec2c49cc7dc5a542606dbcb6c5ffd4a0837a3ee802868 CertUtil: -hashfile command completed successfully.
shasum -a 256 tagspaces-mac-arm64-5.0.3.dmg 55c87cd34c2b4db5eb826c9c9a56c1e6b59e32b3f78282b4fc4edb7207758269 tagspaces-mac-arm64-5.0.3.dmg
sha256sum tagspaces-linux-x64-5.0.3.tar.gz c99f15f89b5a3e0173aa4f54894455febd2707515e05b3e0c673cb1c25beecbc tagspaces-linux-x64-5.0.3.tar.gz
After executing the command, verify that the returned checksum value matches the SHA-256 value mentioned in the SHA256SUMS.txt file for the version of the app you have checked.
If the values do not match, this is a sign that download was incomplete or the package was manipulated. In such cases you can try to download the file again and repeat this procedure.