64-bit
wixuser scopegithub.com · publisher domain- File name
- anki-26.08.1-win-x64.msi
- SHA-256
- d79170c3cd2e6225f9c2ba33212117a8fe70c10735c3f0e5a2864e2f0ccf7c8c
by Anki · AGPL-3.0-or-later
Powerful and intelligent flash cards.
These URLs are the ones Anki declares in its own manifest. We do not proxy or shorten them, and we do not host a copy.
More than one architecture below. Check which one your Windows is if you are not sure.
Run this against the file on disk. If the output does not match the hash below, the file is not what Anki published. Delete it.
Windows · PowerShell
Get-FileHash "anki-26.08.1-win-x64.msi" -Algorithm SHA256macOS · Linux
shasum -a 256 "anki-26.08.1-win-x64.msi"Expected output
d79170c3cd2e6225f9c2ba33212117a8fe70c10735c3f0e5a2864e2f0ccf7c8c
Got a different hash, or one you cannot place? Paste it into the hash checker and it will tell you which program and version it belongs to, past releases included.
This installer is an MSI package, so it takes the standard Windows Installer switches. That is a property of MSI itself rather than something the publisher declared.
64-bit · user scope · MSI convention
msiexec /i "anki-26.08.1-win-x64.msi" /qn /norestartARM64 · user scope · MSI convention
msiexec /i "anki-26.08.1-win-arm64.msi" /qn /norestartRun it from the folder holding the downloaded file, in a terminal opened as administrator when the package installs for all users. Silent means no window and no prompts, so check the exit code rather than waiting for something to appear: 0 is success and 3010 means it worked but wants a reboot.
The macOS build as Homebrew declares it, with the same treatment as the Windows side: the publisher's own URL and a hash to check it against.
| Signal | Finding | Points |
|---|---|---|
| SHA-256 hash published | 2 of 2 installers ship a SHA-256 hashWithout a published hash there is no way to prove the file you downloaded is the file the publisher built. | 30 / 30 |
| Binary provenance | 2 on the publisher's own domainThe strongest signal against a repackaged installer: the file should come from the publisher, not from a mirror nobody vouches for. | 35 / 35 |
| Served over HTTPS | 2 of 2 over HTTPSAn installer fetched over plain HTTP can be modified in transit. | 15 / 15 |
| Release recency | last release about 2 months agoSoftware that has not shipped in years accumulates unpatched vulnerabilities. | 15 / 15 |
| Licence declared | AGPL-3.0-or-laterA declared licence tells you what you are actually allowed to do with the software. | 5 / 5 |
Extensions Anki registers itself to handle.
Yes, in the sense we can actually verify: the installer downloads from github.com, which is a domain we have tied to Anki.
Every one of the 2 installers on this page comes with the SHA-256 Anki declared, so you do not have to take our word for it: hash the file you downloaded and compare.
What this does not tell you is whether the software itself is any good, or whether you want what it does once installed. A publisher can ship something you would rather not run and the download is still authentic. We answer the question we can measure and leave the other one to you.
If Windows says “Windows protected your PC” when you run it, that is SmartScreen reporting reputation, not a malware verdict — it shows up on perfectly legitimate software from small publishers and on releases that are simply new. The reverse matters more: no warning does not mean the file was checked.
How the 100/100 score is calculated · why the source matters more than the reputation
Windows ships with a package manager, and this program is in it. The identifier below is the one Microsoft's repository uses, which is also where the download URL and hash on this page come from.
Install
winget install --id Anki.Anki --exactUpgrade later
winget upgrade --id Anki.AnkiWhy --exact: without it winget matches on name as well as identifier, and a search that returns more than one package makes it stop and ask rather than install. Pinning the identifier is what makes the command safe to put in a script.
Not installing anything, or getting an error back? The commands that actually come up covers upgrading everything at once, what --include-unknown is for, and why winget can be missing from a machine that should have it.
The version history of Anki, each release with the download URL the publisher declared at the time and the SHA-256 to check it against. Useful when an update breaks something and you need to downgrade to a build that worked.
We do not host any of these files and never re-upload them, which is the difference between this and an old-version download site.
2047F71D7771ADD993E15F2F01A56EA41617967AE5B3D6D3F402CBC40716C5E0
C354B8D2DF56232A8A4158B17A155B6E132A1BE56BDED66E8C0FED0FA4AC8005
398F690A8208BD381DC2D4220720A82F6D2249C1FD1B38F46A90DB356CB7C69E
1E8D1F3291BD5E473B36766F2DEC2A931658CF788499A85125458AC9F3237A57
1532223833B45D52DA30ED315F3BA275D9CAD6C67842A0E54FBF394DFDB8BFB6
E094517F40F0C35AA37E8AB7101AAAA7B141C558CAC4A95600B6C6F7C7635353
5D1041AD76457C79A6915AC612B8A2FCD6B9216370D03D199D4B54E5BB3678EE
16E3076DDE0048CF7247AF001552682D96CA3D0E9CA8CE16A6BB2D63E6AC57C8
E202346A0B91293229C73EEF2393B733D4A95FF25B25814852825D76621B55C8
E11ADE8B94DBB5374102669EA589BC1072EA07B93897F3B36FA045F5192EF0BA
4D70FDF8652BA910263D66466D7A94165FE593FC863B9A10C593013EF2828A35
FEFF79FBDE38EAA0102C95D74CD77B05F42D2514AC3522B2087C2AA19A40AE78
F3A687731A2495D3AF4D74463C003DE180E1DA996E07F521D96C09DFC6642AAB
911F802F0DCA3AE5C38D135E47344E8E47DBB4C89EF8FFB8CB65EB21E5038F22
5B5DB854523C08B4E228E6E01D2CDB12C886403619E290E1B455A29A00689EEE
7F1941C40DC3C520DAE9EB3F1171FD5921067845E5F62414A96B9C18567ABA66
1D180201634FFB215D46F8A76BA60BD7640AEE2150B5CC528B8DD6DAE9E4DA43
151663F61BDCDDE0B12489BCEABA85FEE479FE5BF01CD79B97838F0F9D1FA498
9A93874B98D5B0B81BA3A876A13106BE8102845FAF0578B7FEF508EDDF2FF8B4
22F923B2E78BE53B4E738DA8315B85A9838DCAF46CF3279CF06AA9357F6FC470
02D992A47FE826254B3DC707226D9D06C006F3FA0DC1E66C9E47767316896ED9
The file names, so you can tell what you have. Their hashes are in the hash checker and in the downloadable archive.
Publishers take old builds offline without warning, so a link here can stop working even though the hash stays correct forever. If you already have the file, the hash is what matters: it tells you whether what you have is what they published.
Every Anki version with a published manifest, newest first. The most recent ones are listed above with their file names and hashes.
Not related to Anki — just other entries, each with its own official URL and published hash.