|
{% include disclaimer.html translated="no" translationOutdated="no" %}
|
|
|
Verification of the Monero binary files should be done prior to extracting, installing, or using the Monero software. This is the only way to ensure that you are using the official Monero software. If you receive a fake Monero binary (eg. phishing, MITM, etc.), following this guide will protect you from being tricked into using it.
|
|
|
To protect the integrity of the binaries the Monero team provides a cryptographically signed list of all the [SHA256](https://en.wikipedia.org/wiki/SHA-2) hashes. If your downloaded binary has been tampered with it will be produce a [different hash](https://en.wikipedia.org/wiki/File_verification) than the one in the file.
|
|
|
This is an advanced guide for Linux, Mac, or Windows operating systems and will make use of the command line. It will walk you through the process of installing the required software, importing the signing key, downloading the necessary files, and finally verifying that your binary is authentic.
|
|
|
Table of Contents:
|
|
|
- [Install GnuPG](#installing-gnupg)
|
|
|
- [Verify & Import Signing Key](#verify-and-import-signing-key)
|
|
|
- [Download & Verify Hash File](#download-and-verify-hash-file)
|
|
|
- [Download & Verify Binary](#download-and-verify-binary)
|
|
|
Installing GnuPG
|
|
|
+ On Windows, go to the [Gpg4win download page](https://gpg4win.org/download.html) and follow the instructions for installation.
|
|
|
+ On Mac, go to the [Gpgtools download page](https://gpgtools.org/) and follow the instructions for installation.
|
|
|
+ On Linux, GnuPG is installed by default.
|
|
|
Verify and Import Signing Key
|
|
|
This section will cover getting the Monero signing key, making sure it is correct, and importing the key to GnuPG.
|
|
|
Get Signing Key
|
|
|
On Windows or Mac, go to [binaryFate's GPG key](https://raw.githubusercontent.com/monero-project/monero/master/utils/gpg_keys/binaryfate.asc), which he uses to sign the Monero binaries, and save the page as `binaryfate.asc` to your home directory.
|
|
|
On Linux, you can download binaryFate's signing key by issuing the following command:
|
|
|
wget -O binaryfate.asc
https://raw.githubusercontent.com/monero-project/monero/master/utils/gpg_keys/binaryfate.asc
|
|
|
Verify Signing Key
|
|
