Don't trust · Verify

Verify the code yourself.

Every Amulet tool is one HTML file. Confirm the file you downloaded is exactly what we published — in three steps, no install required.

SHA-256 hash list → Read the source ↗ The recovery plan →
  1. Get the official hashes

    Open the SHA-256 hash list — one hash per tool, the fingerprint of the exact code we shipped. You can also browse each tool's individual hash file in the source repository.

  2. Hash the file you downloaded

    Run one command on the file (e.g. amulet_vault_v1.74.html):

    # Windows (PowerShell)
    Get-FileHash .\amulet_vault_v1.74.html -Algorithm SHA256
    
    # macOS
    shasum -a 256 amulet_vault_v1.74.html
    
    # Linux
    sha256sum amulet_vault_v1.74.html
  3. Compare

    If your hash matches the one in the list, the file is authentic and untampered. If it doesn't match, don't use it — re-download from the source and check again.

Why this matters: hashes mean you never have to take our word for it. The code is public and the fingerprints are public — anyone can confirm that what runs on their machine is what we wrote.