64-bit
exeuser scopepackages.element.io · publisher domain- File name
- Element Setup 1.12.25.exe
- SHA-256
- b2fa7e1c51553fb11801ad36c1ebdc0cd4ace888260079e935a50b1ebf9f45fa
- Silent install
- --silent
by Element · AGPL-3.0-only or GPL-3.0-only
Secure collaboration and messaging
These URLs are the ones Element declares in its own manifest. We do not proxy or shorten them, and we do not host a copy.
More than one architecture below. Check which one your Windows is if you are not sure.
Run this against the file on disk. If the output does not match the hash below, the file is not what Element published. Delete it.
Windows · PowerShell
Get-FileHash "Element Setup 1.12.25.exe" -Algorithm SHA256macOS · Linux
shasum -a 256 "Element Setup 1.12.25.exe"Expected output
b2fa7e1c51553fb11801ad36c1ebdc0cd4ace888260079e935a50b1ebf9f45fa
Got a different hash, or one you cannot place? Paste it into the hash checker and it will tell you which program and version it belongs to, past releases included.
The unattended switch below is the one Element declares in the installer manifest, not one we guessed by trying flags.
64-bit · user scope · publisher-declared
.\Element Setup 1.12.25.exe --silentRun it from the folder holding the downloaded file, in a terminal opened as administrator when the package installs for all users. Silent means no window and no prompts, so check the exit code rather than waiting for something to appear: 0 is success and 3010 means it worked but wants a reboot.
The macOS build as Homebrew declares it, with the same treatment as the Windows side: the publisher's own URL and a hash to check it against.
| Signal | Finding | Points |
|---|---|---|
| SHA-256 hash published | 2 of 2 installers ship a SHA-256 hashWithout a published hash there is no way to prove the file you downloaded is the file the publisher built. | 30 / 30 |
| Binary provenance | 2 on the publisher's own domainThe strongest signal against a repackaged installer: the file should come from the publisher, not from a mirror nobody vouches for. | 35 / 35 |
| Served over HTTPS | 2 of 2 over HTTPSAn installer fetched over plain HTTP can be modified in transit. | 15 / 15 |
| Release recency | last release about 0 months agoSoftware that has not shipped in years accumulates unpatched vulnerabilities. | 15 / 15 |
| Licence declared | AGPL-3.0-only or GPL-3.0-onlyA declared licence tells you what you are actually allowed to do with the software. | 5 / 5 |
Yes, in the sense we can actually verify: the installer downloads from element.io, which is a domain we have tied to Element.
Every one of the 2 installers on this page comes with the SHA-256 Element declared, so you do not have to take our word for it: hash the file you downloaded and compare.
What this does not tell you is whether the software itself is any good, or whether you want what it does once installed. A publisher can ship something you would rather not run and the download is still authentic. We answer the question we can measure and leave the other one to you.
If Windows says “Windows protected your PC” when you run it, that is SmartScreen reporting reputation, not a malware verdict — it shows up on perfectly legitimate software from small publishers and on releases that are simply new. The reverse matters more: no warning does not mean the file was checked.
How the 100/100 score is calculated · why the source matters more than the reputation
Windows ships with a package manager, and this program is in it. The identifier below is the one Microsoft's repository uses, which is also where the download URL and hash on this page come from.
Install
winget install --id Element.Element --exactUpgrade later
winget upgrade --id Element.ElementWhy --exact: without it winget matches on name as well as identifier, and a search that returns more than one package makes it stop and ask rather than install. Pinning the identifier is what makes the command safe to put in a script.
Not installing anything, or getting an error back? The commands that actually come up covers upgrading everything at once, what --include-unknown is for, and why winget can be missing from a machine that should have it.
The version history of Element, each release with the download URL the publisher declared at the time and the SHA-256 to check it against. Useful when an update breaks something and you need to downgrade to a build that worked.
We do not host any of these files and never re-upload them, which is the difference between this and an old-version download site.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 file names, so you can tell what you have. Their hashes are in the hash checker and in the downloadable archive.
Publishers take old builds offline without warning, so a link here can stop working even though the hash stays correct forever. If you already have the file, the hash is what matters: it tells you whether what you have is what they published.
Every Element version with a published manifest, newest first. The most recent ones are listed above with their file names and hashes.
Matched on the categories Element and others declare in their own manifests, so the grouping is theirs rather than ours. Each one has its official URL and hash on the same terms as this page.
Not related to Element — just other entries, each with its own official URL and published hash.