Official App & Downloads

Verifying the Hash and Signature of the Installer

Views0

Overview: Verifying the Hash and Signature of the Installer — here are the key points in plain English.

Key takeaway: Download and installation must go through the official channel with a signature check — follow the steps and the risk is low.

Action steps:

  1. Only download from ledger.com or the official app store.
  2. Fetch the published SHA-256 hash and signature from the release page.
  3. Compare the local file hash with the published value.
  4. Discard the file immediately if the hash does not match.
  5. Re-download on a trusted network if verification fails.

Safety reminder: Use only the official Ledger site and Ledger Live. Never type your recovery phrase or PIN into a webpage and never share them with anyone. Pause and verify the moment anything looks unusual.