64-bit
exeuser scopedesktop.figma.com · publisher domain- File name
- Figma-126.7.10.exe
- SHA-256
- 811e1f2cd50d0cbeeb169e0affd8169da382adf5bce59f2870e8772a443c2791
- Silent install
- --silent
- Product code
- Figma
by Figma, Inc. · Proprietary
The Collaborative Interface Design Tool
These URLs are the ones Figma, Inc. declares in its own manifest. We do not proxy or shorten them, and we do not host a copy.
More than one architecture below. Check which one your Windows is if you are not sure.
Run this against the file on disk. If the output does not match the hash below, the file is not what Figma, Inc. published. Delete it.
Windows · PowerShell
Get-FileHash "Figma-126.7.10.exe" -Algorithm SHA256macOS · Linux
shasum -a 256 "Figma-126.7.10.exe"Expected output
811e1f2cd50d0cbeeb169e0affd8169da382adf5bce59f2870e8772a443c2791
Got a different hash, or one you cannot place? Paste it into the hash checker and it will tell you which program and version it belongs to, past releases included.
The unattended switch below is the one Figma, Inc. declares in the installer manifest, not one we guessed by trying flags.
64-bit · user scope · publisher-declared
.\Figma-126.7.10.exe --silent64-bit · machine scope · MSI convention
msiexec /i "Figma-126.7.10.msi" /qn /norestartRun it from the folder holding the downloaded file, in a terminal opened as administrator when the package installs for all users. Silent means no window and no prompts, so check the exit code rather than waiting for something to appear: 0 is success and 3010 means it worked but wants a reboot.
Silent install commands for every program we index · silent uninstall
Every guide on this tells you to hunt for the product code with Get-WmiObject or in the registry. You do not need to: it is published in the installer manifest, and it is printed below.
Product code · 64-bit
{BDE063B2-459A-4ECE-876D-E449ACCAC237}
Uninstall, with the usual prompts
msiexec /x {BDE063B2-459A-4ECE-876D-E449ACCAC237}Silent, for deployment
msiexec /x {BDE063B2-459A-4ECE-876D-E449ACCAC237} /qn /norestartThe codes above belong to Figma 126.7.10, the version in our index. If you have an older release installed, its code is different and this command will report that the product is not installed. In that case run Get-Package -Name "Figma*" in PowerShell to read the code of what you actually have.
This removes the program as the publisher packaged it. Settings and files created after installation, typically under AppData, are deliberately left behind by the uninstaller and have to be deleted by hand if you want them gone.
Reinstalling and hitting error 1638? That is this same product code, and the command above is the fix.
Product codes for every program we index, with the msiexec switches and how to read the code off your own machine.
The macOS build as Homebrew declares it, with the same treatment as the Windows side: the publisher's own URL and a hash to check it against.
| Signal | Finding | Points |
|---|---|---|
| SHA-256 hash published | 3 of 3 installers ship a SHA-256 hashWithout a published hash there is no way to prove the file you downloaded is the file the publisher built. | 30 / 30 |
| Binary provenance | 3 on the publisher's own domainThe strongest signal against a repackaged installer: the file should come from the publisher, not from a mirror nobody vouches for. | 35 / 35 |
| Served over HTTPS | 3 of 3 over HTTPSAn installer fetched over plain HTTP can be modified in transit. | 15 / 15 |
| Release recency | last release about 1 months agoSoftware that has not shipped in years accumulates unpatched vulnerabilities. | 15 / 15 |
| Licence declared | ProprietaryA declared licence tells you what you are actually allowed to do with the software. | 5 / 5 |
Extensions Figma registers itself to handle.
Yes, in the sense we can actually verify: the installer downloads from figma.com, which is a domain we have tied to Figma, Inc.
Every one of the 3 installers on this page comes with the SHA-256 Figma, Inc declared, so you do not have to take our word for it: hash the file you downloaded and compare.
What this does not tell you is whether the software itself is any good, or whether you want what it does once installed. A publisher can ship something you would rather not run and the download is still authentic. We answer the question we can measure and leave the other one to you.
If Windows says “Windows protected your PC” when you run it, that is SmartScreen reporting reputation, not a malware verdict — it shows up on perfectly legitimate software from small publishers and on releases that are simply new. The reverse matters more: no warning does not mean the file was checked.
How the 100/100 score is calculated · why the source matters more than the reputation
Windows ships with a package manager, and this program is in it. The identifier below is the one Microsoft's repository uses, which is also where the download URL and hash on this page come from.
Install
winget install --id Figma.Figma --exactUpgrade later
winget upgrade --id Figma.FigmaWhy --exact: without it winget matches on name as well as identifier, and a search that returns more than one package makes it stop and ask rather than install. Pinning the identifier is what makes the command safe to put in a script.
Not installing anything, or getting an error back? The commands that actually come up covers upgrading everything at once, what --include-unknown is for, and why winget can be missing from a machine that should have it.
The version history of Figma, each release with the download URL the publisher declared at the time and the SHA-256 to check it against. Useful when an update breaks something and you need to downgrade to a build that worked.
We do not host any of these files and never re-upload them, which is the difference between this and an old-version download site.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 file names, so you can tell what you have. Their hashes are in the hash checker and in the downloadable archive.
Publishers take old builds offline without warning, so a link here can stop working even though the hash stays correct forever. If you already have the file, the hash is what matters: it tells you whether what you have is what they published.
Every Figma version with a published manifest, newest first. The most recent ones are listed above with their file names and hashes.
Matched on the categories Figma, Inc. and others declare in their own manifests, so the grouping is theirs rather than ours. Each one has its official URL and hash on the same terms as this page.
Not related to Figma — just other entries, each with its own official URL and published hash.