64-bit
nullsoftuser scopegithub.com · known platform- File name
- Obsidian-1.13.7.exe
- SHA-256
- f233dc24896b3f2d5f9e4b01111181a561d0760b2105f0a474024c5f3143a9bc
by Obsidian · Proprietary
Obsidian is the private and flexible writing app that adapts to the way you think.
These URLs are the ones Obsidian declares in its own manifest. We do not proxy or shorten them, and we do not host a copy.
More than one architecture below. Check which one your Windows is if you are not sure.
Run this against the file on disk. If the output does not match the hash below, the file is not what Obsidian published. Delete it.
Windows · PowerShell
Get-FileHash "Obsidian-1.13.7.exe" -Algorithm SHA256macOS · Linux
shasum -a 256 "Obsidian-1.13.7.exe"Expected output
f233dc24896b3f2d5f9e4b01111181a561d0760b2105f0a474024c5f3143a9bc
Got a different hash, or one you cannot place? Paste it into the hash checker and it will tell you which program and version it belongs to, past releases included.
The macOS build as Homebrew declares it, with the same treatment as the Windows side: the publisher's own URL and a hash to check it against.
| Signal | Finding | Points |
|---|---|---|
| SHA-256 hash published | 3 of 3 installers ship a SHA-256 hashWithout a published hash there is no way to prove the file you downloaded is the file the publisher built. | 30 / 30 |
| Binary provenance | 3 on a recognised distribution platformThe strongest signal against a repackaged installer: the file should come from the publisher, not from a mirror nobody vouches for. | 29.8 / 35 |
| Served over HTTPS | 3 of 3 over HTTPSAn installer fetched over plain HTTP can be modified in transit. | 15 / 15 |
| Release recency | last release about 0 months agoSoftware that has not shipped in years accumulates unpatched vulnerabilities. | 15 / 15 |
| Licence declared | ProprietaryA declared licence tells you what you are actually allowed to do with the software. | 5 / 5 |
Extensions Obsidian registers itself to handle.
The installer comes from a recognised distribution platform rather than Obsidian's own domain. That is normal for this kind of software and not a red flag by itself.
Every one of the 3 installers on this page comes with the SHA-256 Obsidian declared, so you do not have to take our word for it: hash the file you downloaded and compare.
What this does not tell you is whether the software itself is any good, or whether you want what it does once installed. A publisher can ship something you would rather not run and the download is still authentic. We answer the question we can measure and leave the other one to you.
If Windows says “Windows protected your PC” when you run it, that is SmartScreen reporting reputation, not a malware verdict — it shows up on perfectly legitimate software from small publishers and on releases that are simply new. The reverse matters more: no warning does not mean the file was checked.
How the 95/100 score is calculated · why the source matters more than the reputation
Windows ships with a package manager, and this program is in it. The identifier below is the one Microsoft's repository uses, which is also where the download URL and hash on this page come from.
Install
winget install --id Obsidian.Obsidian --exactUpgrade later
winget upgrade --id Obsidian.ObsidianWhy --exact: without it winget matches on name as well as identifier, and a search that returns more than one package makes it stop and ask rather than install. Pinning the identifier is what makes the command safe to put in a script.
Not installing anything, or getting an error back? The commands that actually come up covers upgrading everything at once, what --include-unknown is for, and why winget can be missing from a machine that should have it.
The version history of Obsidian, each release with the download URL the publisher declared at the time and the SHA-256 to check it against. Useful when an update breaks something and you need to downgrade to a build that worked.
We do not host any of these files and never re-upload them, which is the difference between this and an old-version download site.
E367400D7C54D86628486D6BEF5CE1B052DC2EDF57EBEE3D9F7A763AF0181F21
8C761AAA40310D339B6936092E91E99A9886DAF1FD655F4C8D59E9F7FA46E7A0
F35D2A35061098400A3FAFC1BFD38D8BD33F1AD76DF8B78B62CCDF20B0A30D26
1F9E6A63A511456920DB8191112A446494AB907D2834F1B779840A60EA6445DF
B29FD8812282BC44E8782F3ED00C13BC54EF8A4039C1D86B2D3559311E77B895
206941AF785F78E212787FAAC5927D624A8A9F813F916803ECBFB8D28F2706C0
94EA213B7FA3FE0F26E5B3C3F8C7D1A43B1FC4E7DC3948DAC67B805B976312CD
CF5ECD9E9D1B703186E41D938C1FEFE4E06C075699DE7D48E64D4CA1740D38CE
85EA74E960EE66B918C5A45E810F8D2AA520B09B0DEC600BEB79D7859EC343FD
E6B8F82CCFCDA4553A35EFDFD17A56935B08543E82078D5AA1404D282CECF9AC
23BA3233BC58F1DC330176ED8490936B9390B42E653A249C519C11F0E458B66F
B962D67046D19FEEFC0841BF9BA94714DDACA120DBB37EC54BA72EB6642115D3
1FAE2688513CA33A7B85EEF53DC433E056487AC94C7FE95E5D33AA38B4CF7BD4
045F480FD779784EC647D654D17ABB764B60BB1661B142C236F994C6C49E4DFB
758DAAD483D6B90F66E6E773C46FC0505E5C34E74F764EB1BEA94EF02E002BB9
4E6EF740D13B2E6713FD83DE9475ACA1468C4A6C8DE1781D0E0F75C5E57CAA20
A9E64984A51590079E40A475B7EC5AA39EB9DC58D3637108DA3916BB39D572F2
F8097C934D0A4A1022611213255FD11FD0F7BF20A13DB47882DE2D9C25566AE1
EF1C0BEFCEAFB6931EB60F484C01DBCEF0E7CB8D6350C8F1D8FB8D0BFB1A36AB
741DBA3DC1BBE0099E5E1386D969E6DE2A48A94018DFF16E26307BD25226CB54
The file names, so you can tell what you have. Their hashes are in the hash checker and in the downloadable archive.
Publishers take old builds offline without warning, so a link here can stop working even though the hash stays correct forever. If you already have the file, the hash is what matters: it tells you whether what you have is what they published.
Every Obsidian version with a published manifest, newest first. The most recent ones are listed above with their file names and hashes.
Matched on the categories Obsidian and others declare in their own manifests, so the grouping is theirs rather than ours. Each one has its official URL and hash on the same terms as this page.
Not related to Obsidian — just other entries, each with its own official URL and published hash.