64-bit
exemachine scopedesktop.docker.com · publisher domain- File name
- Docker Desktop Installer.exe
- SHA-256
- 9ac03d4e900c0fdee981d4bde083a55fdfb28ffba2cae77726eff2a437254822
- Silent install
- install --quiet
by Docker Inc. · Proprietary
An application for the building and sharing of containerized applications.
These URLs are the ones Docker Inc. declares in its own manifest. We do not proxy or shorten them, and we do not host a copy.
More than one architecture below. Check which one your Windows is if you are not sure.
Run this against the file on disk. If the output does not match the hash below, the file is not what Docker Inc. published. Delete it.
Windows · PowerShell
Get-FileHash "Docker Desktop Installer.exe" -Algorithm SHA256macOS · Linux
shasum -a 256 "Docker Desktop Installer.exe"Expected output
9ac03d4e900c0fdee981d4bde083a55fdfb28ffba2cae77726eff2a437254822
Got a different hash, or one you cannot place? Paste it into the hash checker and it will tell you which program and version it belongs to, past releases included.
The unattended switch below is the one Docker Inc. declares in the installer manifest, not one we guessed by trying flags.
64-bit · machine scope · publisher-declared
.\Docker Desktop Installer.exe install --quietRun it from the folder holding the downloaded file, in a terminal opened as administrator when the package installs for all users. Silent means no window and no prompts, so check the exit code rather than waiting for something to appear: 0 is success and 3010 means it worked but wants a reboot.
The macOS build as Homebrew declares it, with the same treatment as the Windows side: the publisher's own URL and a hash to check it against.
| Signal | Finding | Points |
|---|---|---|
| SHA-256 hash published | 2 of 2 installers ship a SHA-256 hashWithout a published hash there is no way to prove the file you downloaded is the file the publisher built. | 30 / 30 |
| Binary provenance | 2 on the publisher's own domainThe strongest signal against a repackaged installer: the file should come from the publisher, not from a mirror nobody vouches for. | 35 / 35 |
| Served over HTTPS | 2 of 2 over HTTPSAn installer fetched over plain HTTP can be modified in transit. | 15 / 15 |
| Release recency | last release about 0 months agoSoftware that has not shipped in years accumulates unpatched vulnerabilities. | 15 / 15 |
| Licence declared | ProprietaryA declared licence tells you what you are actually allowed to do with the software. | 5 / 5 |
Yes, in the sense we can actually verify: the installer downloads from docker.com, which is a domain we have tied to Docker Inc.
Every one of the 2 installers on this page comes with the SHA-256 Docker Inc declared, so you do not have to take our word for it: hash the file you downloaded and compare.
What this does not tell you is whether the software itself is any good, or whether you want what it does once installed. A publisher can ship something you would rather not run and the download is still authentic. We answer the question we can measure and leave the other one to you.
If Windows says “Windows protected your PC” when you run it, that is SmartScreen reporting reputation, not a malware verdict — it shows up on perfectly legitimate software from small publishers and on releases that are simply new. The reverse matters more: no warning does not mean the file was checked.
How the 100/100 score is calculated · why the source matters more than the reputation
Windows ships with a package manager, and this program is in it. The identifier below is the one Microsoft's repository uses, which is also where the download URL and hash on this page come from.
Install
winget install --id Docker.DockerDesktop --exactUpgrade later
winget upgrade --id Docker.DockerDesktopWhy --exact: without it winget matches on name as well as identifier, and a search that returns more than one package makes it stop and ask rather than install. Pinning the identifier is what makes the command safe to put in a script.
Not installing anything, or getting an error back? The commands that actually come up covers upgrading everything at once, what --include-unknown is for, and why winget can be missing from a machine that should have it.
The version history of Docker Desktop, each release with the download URL the publisher declared at the time and the SHA-256 to check it against. Useful when an update breaks something and you need to downgrade to a build that worked.
We do not host any of these files and never re-upload them, which is the difference between this and an old-version download site.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 file names, so you can tell what you have. Their hashes are in the hash checker and in the downloadable archive.
Publishers take old builds offline without warning, so a link here can stop working even though the hash stays correct forever. If you already have the file, the hash is what matters: it tells you whether what you have is what they published.
Every Docker Desktop version with a published manifest, newest first. The most recent ones are listed above with their file names and hashes.
Matched on the categories Docker Inc. and others declare in their own manifests, so the grouping is theirs rather than ours. Each one has its official URL and hash on the same terms as this page.
Not related to Docker Desktop — just other entries, each with its own official URL and published hash.