64-bit
exeuser scopestable.dl2.discordapp.net · publisher-owned- File name
- DiscordSetup.exe
- SHA-256
- 8433e35f12de8faec4e1589ad3c0c04d28eaf4bfd0d239d50409132b9e0650bf
by Discord Inc. · Proprietary
Your Place to Talk and Hang Out
These URLs are the ones Discord Inc. declares in its own manifest. We do not proxy or shorten them, and we do not host a copy.
Run this against the file on disk. If the output does not match the hash below, the file is not what Discord Inc. published. Delete it.
Windows · PowerShell
Get-FileHash "DiscordSetup.exe" -Algorithm SHA256macOS · Linux
shasum -a 256 "DiscordSetup.exe"Expected output
8433e35f12de8faec4e1589ad3c0c04d28eaf4bfd0d239d50409132b9e0650bf
Got a different hash, or one you cannot place? Paste it into the hash checker and it will tell you which program and version it belongs to, past releases included.
The macOS build as Homebrew declares it, with the same treatment as the Windows side: the publisher's own URL and a hash to check it against.
| Signal | Finding | Points |
|---|---|---|
| SHA-256 hash published | 1 of 1 installers ship a SHA-256 hashWithout a published hash there is no way to prove the file you downloaded is the file the publisher built. | 30 / 30 |
| Binary provenance | 1 on a domain owned by the publisherThe strongest signal against a repackaged installer: the file should come from the publisher, not from a mirror nobody vouches for. | 35 / 35 |
| Served over HTTPS | 1 of 1 over HTTPSAn installer fetched over plain HTTP can be modified in transit. | 15 / 15 |
| Release recency | last release about 0 months agoSoftware that has not shipped in years accumulates unpatched vulnerabilities. | 15 / 15 |
| Licence declared | ProprietaryA declared licence tells you what you are actually allowed to do with the software. | 5 / 5 |
Yes, in the sense we can actually verify: the installer downloads from discordapp.net, which is a domain we have tied to Discord Inc.
The installer on this page comes with the SHA-256 Discord Inc declared, so you do not have to take our word for it: hash the file you downloaded and compare.
What this does not tell you is whether the software itself is any good, or whether you want what it does once installed. A publisher can ship something you would rather not run and the download is still authentic. We answer the question we can measure and leave the other one to you.
If Windows says “Windows protected your PC” when you run it, that is SmartScreen reporting reputation, not a malware verdict — it shows up on perfectly legitimate software from small publishers and on releases that are simply new. The reverse matters more: no warning does not mean the file was checked.
How the 100/100 score is calculated · why the source matters more than the reputation
Windows ships with a package manager, and this program is in it. The identifier below is the one Microsoft's repository uses, which is also where the download URL and hash on this page come from.
Install
winget install --id Discord.Discord --exactUpgrade later
winget upgrade --id Discord.DiscordWhy --exact: without it winget matches on name as well as identifier, and a search that returns more than one package makes it stop and ask rather than install. Pinning the identifier is what makes the command safe to put in a script.
Not installing anything, or getting an error back? The commands that actually come up covers upgrading everything at once, what --include-unknown is for, and why winget can be missing from a machine that should have it.
The version history of Discord, each release with the download URL the publisher declared at the time and the SHA-256 to check it against. Useful when an update breaks something and you need to downgrade to a build that worked.
We do not host any of these files and never re-upload them, which is the difference between this and an old-version download site.
B36BF1532FC3C30A7AD6BB0969EB8A3E51E678A485EAFF4A0A328D1BF2D1C9DB
EF69D05D9BA2191762B2B44656B277F51DF8FA7918693FA501EE9C80A2D843E8
9D1C22124D9E9230FF7CD9CE52C10D6938F7B688FDEA7B3B66D25C333B1D58D5
90E9F7E392DDF4FBD785AF43EC77A5962593EEFEC55E74AF2A3279064B2A257F
FF1F988536352F742ED3A29C165432622492D797F12CD94836215D9A2B273932
5DB36B87A646986D7DE3621DFD17AFDA210E1DEC7277DE4B4D9D1FE60D8800D7
C7380680E33E74C5C7EA6474C03B4262E836D02BDACB929D6798D13DF08957ED
23577E5A8AA89E28D10AAD913EDB2FAC2F7AA39A4CE0E6327E8482AF90802053
83B721BFF992E92BA4EFAE31C3A4D57B5D739C892448FDF4857D32D44CBF3A14
7872A4F9FBA2483FBFE0E2E08EE23F03558A7C45FED26E077429363E83176FF9
7FDD1C416EFDB090942C22E3E5AB16AEB1D3F2B1F881690D7336AF083D4303DE
3EE7967FC974F0F0D3C829D196F6C9846331815D3AB1C3B61B972306B60E1E71
99909799082C39500BD6ABE13EC7752FBE13EE659A75DDAB585FF727D1D8B2BB
851EF42F56604C5B0998A683AC603B986898DDC1D06246E4E6EF8990A0FEF005
BA0CB90968E81AD6405C74D4514D4D94C86D9194B2AC822600DFA9C6704AD784
4F8A97532221ED08F962230E35A368A5330C50BBBD1E3EF9448C5E661DEC6849
98BB7E0C5C0AC769A8B275052464D077CEBF9EDC78310FC276221CD866504651
242B40A7302D475E12B5BE61DEB3A88D9392EAE84A241790542D73F59B79E85A
0C7952AA2B24D6902803943451C16734A53B17007510E5C970793A0CB420EDAA
3F0306CACEAA9594C608B39DBEE8CEABA4422ABC51052EE21DEDA7280EEE9173
The file names, so you can tell what you have. Their hashes are in the hash checker and in the downloadable archive.
Publishers take old builds offline without warning, so a link here can stop working even though the hash stays correct forever. If you already have the file, the hash is what matters: it tells you whether what you have is what they published.
Every Discord version with a published manifest, newest first. The most recent ones are listed above with their file names and hashes.
Matched on the categories Discord Inc. and others declare in their own manifests, so the grouping is theirs rather than ours. Each one has its official URL and hash on the same terms as this page.
Not related to Discord — just other entries, each with its own official URL and published hash.