Don't trust · Verify

# Verify the code yourself.

Every Amulet tool is one HTML file. Confirm the file you downloaded is exactly what we published — in three steps, no install required.

SHA-256 hash list → Read the source ↗

1. ### Get the official hashes

   Open the SHA-256 hash list — one hash per tool, the fingerprint of the exact code we shipped. You can also browse each tool's individual hash file in the source repository.

2. ### Hash the file you downloaded

   Run one command on the file (e.g. amulet_vault_v1.74.html):

       # Windows (PowerShell)
       Get-FileHash .\amulet_vault_v1.74.html -Algorithm SHA256

       # macOS
       shasum -a 256 amulet_vault_v1.74.html

       # Linux
       sha256sum amulet_vault_v1.74.html

3. ### Compare

   If your hash matches the one in the list, the file is authentic and untampered. If it doesn't match, don't use it — re-download from the source and check again.

Why this matters: hashes mean you never have to take our word for it. The code is public and the fingerprints are public — anyone can confirm that what runs on their machine is what we wrote.