Joplin

by Laurent Cozic · AGPL-3.0-or-later

Joplin is an open source note-taking app. Capture your thoughts and securely access them from any device.

Record

Latest version: 3.6.15
Release date: 20 Jun 2026
Official page: https://joplinapp.org/
Package identifier: Joplin.Joplin

Official downloads

These URLs are the ones Laurent Cozic declares in its own manifest. We do not proxy or shorten them, and we do not host a copy.

32-bit

nullsoftuser scopegithub.com · known platform

File name: Joplin-Setup-3.6.15.exe

https://github.com/laurent22/joplin/releases/download/v3.6.15/Joplin-Setup-3.6.15.exe

SHA-256: 99e0741977f82132a9bf6c6593a57ab9c686a1c8355338d0ac1e1ea622ecc96b

Verify the file you downloaded

Run this against the file on disk. If the output does not match the hash below, the file is not what Laurent Cozic published. Delete it.

Windows · PowerShell

Get-FileHash "Joplin-Setup-3.6.15.exe" -Algorithm SHA256

macOS · Linux

shasum -a 256 "Joplin-Setup-3.6.15.exe"

Expected output

99e0741977f82132a9bf6c6593a57ab9c686a1c8355338d0ac1e1ea622ecc96b

Got a different hash, or one you cannot place? Paste it into the hash checker and it will tell you which program and version it belongs to, past releases included.

Download Joplin for Mac

The macOS build as Homebrew declares it, with the same treatment as the Windows side: the publisher's own URL and a hash to check it against.

Version on Homebrew: 3.6.15
File name: Joplin-3.6.15-arm64.DMG
Download URL: https://github.com/laurent22/joplin/releases/download/v3.6.15/Joplin-3.6.15-arm64.DMG
SHA-256: d8b33336d3cbe963d37fd6af1a677d837fcee6b793d6690ce6a486c240197f29
Install with Homebrew: brew install --cask joplin

How we scored this 95 out of 100

Signal	Finding	Points
SHA-256 hash published	1 of 1 installers ship a SHA-256 hashWithout a published hash there is no way to prove the file you downloaded is the file the publisher built.	30 / 30
Binary provenance	1 on a recognised distribution platformThe strongest signal against a repackaged installer: the file should come from the publisher, not from a mirror nobody vouches for.	29.8 / 35
Served over HTTPS	1 of 1 over HTTPSAn installer fetched over plain HTTP can be modified in transit.	15 / 15
Release recency	last release about 2 months agoSoftware that has not shipped in years accumulates unpatched vulnerabilities.	15 / 15
Licence declared	AGPL-3.0-or-laterA declared licence tells you what you are actually allowed to do with the software.	5 / 5

Is Joplin safe to download?

The installer comes from a recognised distribution platform rather than Laurent Cozic's own domain. That is normal for this kind of software and not a red flag by itself.

The installer on this page comes with the SHA-256 Laurent Cozic declared, so you do not have to take our word for it: hash the file you downloaded and compare.

What this does not tell you is whether the software itself is any good, or whether you want what it does once installed. A publisher can ship something you would rather not run and the download is still authentic. We answer the question we can measure and leave the other one to you.

If Windows says “Windows protected your PC” when you run it, that is SmartScreen reporting reputation, not a malware verdict — it shows up on perfectly legitimate software from small publishers and on releases that are simply new. The reverse matters more: no warning does not mean the file was checked.

How the 95/100 score is calculated · why the source matters more than the reputation

Install Joplin with winget

Windows ships with a package manager, and this program is in it. The identifier below is the one Microsoft's repository uses, which is also where the download URL and hash on this page come from.

Install

winget install --id Joplin.Joplin --exact

Upgrade later

winget upgrade --id Joplin.Joplin

Why --exact: without it winget matches on name as well as identifier, and a search that returns more than one package makes it stop and ask rather than install. Pinning the identifier is what makes the command safe to put in a script.

Not installing anything, or getting an error back? The commands that actually come up covers upgrading everything at once, what --include-unknown is for, and why winget can be missing from a machine that should have it.

Old versions of Joplin20 with hashes

The version history of Joplin, each release with the download URL the publisher declared at the time and the SHA-256 to check it against. Useful when an update breaks something and you need to downgrade to a build that worked.

We do not host any of these files and never re-upload them, which is the difference between this and an old-version download site.

3.6.14

released 19 May 2026

Joplin-Setup-3.6.14.exe32-bitofficial URL
4AC91174220D28A93538ACA8FEFD87F4D9F358D98388A5A001432D506898E650

3.6.13

released 12 May 2026

Joplin-Setup-3.6.13.exe32-bitofficial URL
4416D1B217FF483C1DE73C45D0958C6A3562B62ED1F0C7DAED51EDBE111C1672

3.6.11

released 08 May 2026

Joplin-Setup-3.6.11.exe32-bitofficial URL
961AAF5C7D008C1546BE227816AA2712595F1EF4B95FE459EFB802119C168DED

3.5.13

released 25 Feb 2026

Joplin-Setup-3.5.13.exe32-bitofficial URL
808C5155861AFCAA69264C87EBE9F718D5229ED0DD7D937C1FFA7E9B907DCA89

3.5.12

released 17 Jan 2026

Joplin-Setup-3.5.12.exe32-bitofficial URL
797CD5FDC2AD26090F9B8125C2A6503AA9ACE7D9E0CF98FA63892AF1B8AE8F57

3.5.11

released 12 Jan 2026

Joplin-Setup-3.5.11.exe32-bitofficial URL
220A169F40BAC301D05F5CB2B421B50B7D77AF5FAC4E979E22C3FCF5DD5F4161

3.4.12

released 09 Sept 2025

Joplin-Setup-3.4.12.exe32-bitofficial URL
E79957677B4530514470F39B770C32ABB889A2D21C66D1B6282D49F31E9A4461

3.4.10

released 01 Sept 2025

Joplin-Setup-3.4.10.exe32-bitofficial URL
61609E61B782E49B41F02320CD52D2DF1F39DFD6E79E47E1BD93C3D939D49F6D

3.4.7

released 22 Aug 2025

Joplin-Setup-3.4.7.exe32-bitofficial URL
F9AF0752B60DD85D738625EF4C19477B63590C12CF1C32868F9396C5C286D6FD

3.4.6

released 20 Aug 2025

Joplin-Setup-3.4.6.exe32-bitofficial URL
7D6A4650EF63D2E1E74771571DA8709F31079A8F9707FC8D2BEC9E9313CF9AC2

3.3.13

released 09 Jun 2025

Joplin-Setup-3.3.13.exe32-bitofficial URL
46C73FD6714927B45E0C273A5FB1BDB593912BEF11838B691B3A254D1E8D29BE

3.3.12

released 04 May 2025

Joplin-Setup-3.3.12.exe32-bitofficial URL
29ADC5F45CC0E3F8A454AAA868472941D3C48DD78D927A9BD60203240046AD75

3.3.10

released 02 May 2025

Joplin-Setup-3.3.10.exe32-bitofficial URL
B36B5650FC6BB2418F275A40AD9375873E3E0C1E3B62872F454F2060E0CE89C0

3.3.9

released 01 May 2025

Joplin-Setup-3.3.9.exe32-bitofficial URL
D16D737B4D995E51013B8BC856916FCAD9229281F8DC98EDFB38DA515AFF1FFF

3.2.13

released 28 Feb 2025

Joplin-Setup-3.2.13.exe32-bitofficial URL
26057390B8E090ABE7D7814AA94A63E0EBB39CF7F0F967A5BDF9141D3068CB99

3.2.12

released 23 Jan 2025

Joplin-Setup-3.2.12.exe32-bitofficial URL
95E9A8A527ED8C17F7893B0E2072D1CE530BD6EC7FF441C9ADFC1832E557A651

3.2.11

released 13 Jan 2025

Joplin-Setup-3.2.11.exe32-bitofficial URL
22069D270452832EC588168E2DDF7E57EC225B7DE01BEFB5797E86C9A4C35344

3.1.24

released 09 Nov 2024

Joplin-Setup-3.1.24.exe32-bitofficial URL
E50A6A466AFAEB77327FC3980768696AEDB19D798115DE0B8F716986CCE6B80C

3.1.23

released 07 Nov 2024

Joplin-Setup-3.1.23.exe32-bitofficial URL
7D178E0FC1AB9E3A1B907231DD54B518EEE34FAA257BC94D9E7C85496A05F9AB

3.1.22

released 04 Nov 2024

Joplin-Setup-3.1.22.exe32-bitofficial URL
0F150AD051A39F25DEF943C5DB68216B62FF5482A39010A553E5E3823EB84F4C

Earlier releases20 more

The file names, so you can tell what you have. Their hashes are in the hash checker and in the downloadable archive.

3.1.20Joplin-Setup-3.1.20.exe
3.0.15Joplin-Setup-3.0.15.exe
3.0.14Joplin-Setup-3.0.14.exe
3.0.12Joplin-Setup-3.0.12.exe
2.14.22Joplin-Setup-2.14.22.exe
2.14.20Joplin-Setup-2.14.20.exe
2.14.19Joplin-Setup-2.14.19.exe
2.14.17Joplin-Setup-2.14.17.exe
2.13.15Joplin-Setup-2.13.15.exe
2.13.14Joplin-Setup-2.13.14.exe
2.13.13Joplin-Setup-2.13.13.exe
2.13.12Joplin-Setup-2.13.12.exe
2.13.11Joplin-Setup-2.13.11.exe
2.13.10Joplin-Setup-2.13.10.exe
2.13.9Joplin-Setup-2.13.9.exe
2.13.8Joplin-Setup-2.13.8.exe
2.12.19Joplin-Setup-2.12.19.exe
2.12.18Joplin-Setup-2.12.18.exe
2.12.15Joplin-Setup-2.12.15.exe
2.11.11Joplin-Setup-2.11.11.exe

Publishers take old builds offline without warning, so a link here can stop working even though the hash stays correct forever. If you already have the file, the hash is what matters: it tells you whether what you have is what they published.

Every version on record72

Every Joplin version with a published manifest, newest first. The most recent ones are listed above with their file names and hashes.

3.6.15
3.6.14
3.6.13
3.6.11
3.5.13
3.5.12
3.5.11
3.4.12
3.4.10
3.4.7
3.4.6
3.3.13
3.3.12
3.3.10
3.3.9
3.2.13
3.2.12
3.2.11
3.1.24
3.1.23
3.1.22
3.1.20
3.0.15
3.0.14
3.0.12
2.14.22
2.14.20
2.14.19
2.14.17
2.13.15
2.13.14
2.13.13
2.13.12
2.13.11
2.13.10
2.13.9
2.13.8
2.12.19
2.12.18
2.12.15
2.11.11
2.10.19
2.10.18
2.10.17
2.10.16
2.9.17
2.8.8
2.7.15
2.7.13
2.6.10
2.6.9
2.5.12
2.5.10
2.5.8
2.4.12
2.4.9
2.3.5
2.3.3
2.2.7
2.1.9
2.0.11
2.0.9
1.8.5
1.7.11
1.6.8
1.6.7
1.5.14
1.4.19
1.3.18
1.2.6
1.0.233
1.0.216

Similar programs we index

Matched on the categories Laurent Cozic and others declare in their own manifests, so the grouping is theirs rather than ours. Each one has its official URL and hash on the same terms as this page.

More programs we index

Not related to Joplin — just other entries, each with its own official URL and published hash.

Where our data comes from

Windows manifest: github.com/microsoft/winget-pkgs/tree/master/manifests/j/Joplin/Joplin/3.6.15
macOS cask: formulae.brew.sh/cask/joplin