How to verify a crypto wallet download link
Start at the wallet's official website, then compare the installer checksum with the release page. Avoid search ads and links sent in messages.
Vahe HakobyanEditor-in-chief
Updated Oct 5, 20263 min readFact-checked
On this page
A fake download page can copy a wallet's name and logo. These checks help you catch a changed file before you install it.
How do you find the official download link?
Begin at the wallet's official website, not a search result or ad. Paid links can lead to a fake wallet site. Type the official domain yourself, or open a bookmark you saved earlier. Do not trust download links from email, texts, or social messages.
How do you verify the download is real?
The release page should point to the same app store listing you found on the official site. It should also publish a checksum or signature. A checksum is a string that changes if the file changes. Compare it with the value you calculate.
- 1Open the app store listingFrom the official site, follow its link. Confirm the developer name matches.
- 2Check the developer profileCompare the listed website with the official domain. Fake listings can copy names and icons.
- 3Download from the release pageGet the installer from the official download page. Save it where you can find it.
- 4Find the published checksumLook for a checksum or signature next to the file name. If none is listed, treat the file as unverified.
- 5Calculate your file's hashUse a trusted file hash tool to produce the checksum.
- 6Compare the two valuesCheck every character. One difference means the file is not the published one.
What should you do after installing?
Legitimate wallet support does not ask for your seed phrase or private key. Anyone who asks for them is trying to take your funds.
Frequently asked questions
Create a new wallet from a verified download and use a new seed phrase. If you entered your old seed phrase there, treat that wallet as compromised.
On Windows, run certutil in Command Prompt. On macOS or Linux, run shasum in Terminal. Compare the output with the release page.
No. The padlock encrypts your connection, but anyone can get a certificate for a lookalike domain.
No. Fake listings can appear with similar names and icons. Confirm the developer name and website against the official site.
