64-bit
nullsoftmachine scopesourceforge.net · known platform- File name
- download
- SHA-256
- ff508e2f912d59c9eabaf03633ebacfd45c2049f38dcac027b8a7d7ad867ab2f
by The qBittorrent project · GPL-3.0
Free and reliable P2P Bittorent client.
These URLs are the ones The qBittorrent project declares in its own manifest. We do not proxy or shorten them, and we do not host a copy.
Run this against the file on disk. If the output does not match the hash below, the file is not what The qBittorrent project published. Delete it.
Windows · PowerShell
Get-FileHash "download" -Algorithm SHA256macOS · Linux
shasum -a 256 "download"Expected output
ff508e2f912d59c9eabaf03633ebacfd45c2049f38dcac027b8a7d7ad867ab2f
Got a different hash, or one you cannot place? Paste it into the hash checker and it will tell you which program and version it belongs to, past releases included.
The macOS build as Homebrew declares it, with the same treatment as the Windows side: the publisher's own URL and a hash to check it against.
| Signal | Finding | Points |
|---|---|---|
| SHA-256 hash published | 1 of 1 installers ship a SHA-256 hashWithout a published hash there is no way to prove the file you downloaded is the file the publisher built. | 30 / 30 |
| Binary provenance | 1 on a recognised distribution platformThe strongest signal against a repackaged installer: the file should come from the publisher, not from a mirror nobody vouches for. | 29.8 / 35 |
| Served over HTTPS | 1 of 1 over HTTPSAn installer fetched over plain HTTP can be modified in transit. | 15 / 15 |
| Release recency | last release about 1 months agoSoftware that has not shipped in years accumulates unpatched vulnerabilities. | 15 / 15 |
| Licence declared | GPL-3.0A declared licence tells you what you are actually allowed to do with the software. | 5 / 5 |
Extensions qBittorrent registers itself to handle.
The installer comes from a recognised distribution platform rather than The qBittorrent project's own domain. That is normal for this kind of software and not a red flag by itself.
The installer on this page comes with the SHA-256 The qBittorrent project declared, so you do not have to take our word for it: hash the file you downloaded and compare.
What this does not tell you is whether the software itself is any good, or whether you want what it does once installed. A publisher can ship something you would rather not run and the download is still authentic. We answer the question we can measure and leave the other one to you.
If Windows says “Windows protected your PC” when you run it, that is SmartScreen reporting reputation, not a malware verdict — it shows up on perfectly legitimate software from small publishers and on releases that are simply new. The reverse matters more: no warning does not mean the file was checked.
How the 95/100 score is calculated · why the source matters more than the reputation
Windows ships with a package manager, and this program is in it. The identifier below is the one Microsoft's repository uses, which is also where the download URL and hash on this page come from.
Install
winget install --id qBittorrent.qBittorrent --exactUpgrade later
winget upgrade --id qBittorrent.qBittorrentWhy --exact: without it winget matches on name as well as identifier, and a search that returns more than one package makes it stop and ask rather than install. Pinning the identifier is what makes the command safe to put in a script.
Not installing anything, or getting an error back? The commands that actually come up covers upgrading everything at once, what --include-unknown is for, and why winget can be missing from a machine that should have it.
The version history of qBittorrent, each release with the download URL the publisher declared at the time and the SHA-256 to check it against. Useful when an update breaks something and you need to downgrade to a build that worked.
We do not host any of these files and never re-upload them, which is the difference between this and an old-version download site.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 file names, so you can tell what you have. Their hashes are in the hash checker and in the downloadable archive.
Publishers take old builds offline without warning, so a link here can stop working even though the hash stays correct forever. If you already have the file, the hash is what matters: it tells you whether what you have is what they published.
Every qBittorrent version with a published manifest, newest first. The most recent ones are listed above with their file names and hashes.
Matched on the categories The qBittorrent project and others declare in their own manifests, so the grouping is theirs rather than ours. Each one has its official URL and hash on the same terms as this page.
Not related to qBittorrent — just other entries, each with its own official URL and published hash.