Spotify

by Spotify AB · Proprietary

All the music you’ll ever need.

Record

Latest version: 1.2.96.518.g366879e1
Release date: 12 Aug 2026
Official page: https://www.spotify.com/download/windows/
Package identifier: Spotify.Spotify

Official downloads

These URLs are the ones Spotify AB declares in its own manifest. We do not proxy or shorten them, and we do not host a copy.

More than one architecture below. Check which one your Windows is if you are not sure.

64-bit

exeuser scopedownload.scdn.co · publisher-owned

File name: SpotifyFullSetupX64.exe

https://download.scdn.co/SpotifyFullSetupX64.exe

SHA-256: 8b2bcba476f0c13e6ea273c3d3fa99a1fd920d56a2b8386d1a63d75b7fcb5f2b

Silent install: /silent /skip-app-launch

ARM64

exeuser scopedownload.scdn.co · publisher-owned

File name: SpotifyFullSetupARM64.exe

https://download.scdn.co/SpotifyFullSetupARM64.exe

SHA-256: 6fcf900517cc3160a0e768e22660516d6ba3b6eeb406a66ac7049c79700c6514

Silent install: /silent /skip-app-launch

Verify the file you downloaded

Run this against the file on disk. If the output does not match the hash below, the file is not what Spotify AB published. Delete it.

Windows · PowerShell

Get-FileHash "SpotifyFullSetupX64.exe" -Algorithm SHA256

macOS · Linux

shasum -a 256 "SpotifyFullSetupX64.exe"

Expected output

8b2bcba476f0c13e6ea273c3d3fa99a1fd920d56a2b8386d1a63d75b7fcb5f2b

Got a different hash, or one you cannot place? Paste it into the hash checker and it will tell you which program and version it belongs to, past releases included.

Install Spotify silently

The unattended switch below is the one Spotify AB declares in the installer manifest, not one we guessed by trying flags.

64-bit · user scope · publisher-declared

.\SpotifyFullSetupX64.exe /silent /skip-app-launch

ARM64 · user scope · publisher-declared

.\SpotifyFullSetupARM64.exe /silent /skip-app-launch

Run it from the folder holding the downloaded file, in a terminal opened as administrator when the package installs for all users. Silent means no window and no prompts, so check the exit code rather than waiting for something to appear: 0 is success and 3010 means it worked but wants a reboot.

Silent install commands for every program we index

Download Spotify for Mac

The macOS build as Homebrew declares it, with the same treatment as the Windows side: the publisher's own URL and a hash to check it against.

Version on Homebrew: 1.2.96.518
File name: SpotifyARM64.dmg
Download URL: https://download.scdn.co/SpotifyARM64.dmg
Install with Homebrew: brew install --cask spotify

How we scored this 100 out of 100

Signal	Finding	Points
SHA-256 hash published	2 of 2 installers ship a SHA-256 hashWithout a published hash there is no way to prove the file you downloaded is the file the publisher built.	30 / 30
Binary provenance	2 on a domain owned by the publisherThe strongest signal against a repackaged installer: the file should come from the publisher, not from a mirror nobody vouches for.	35 / 35
Served over HTTPS	2 of 2 over HTTPSAn installer fetched over plain HTTP can be modified in transit.	15 / 15
Release recency	last release about 0 months agoSoftware that has not shipped in years accumulates unpatched vulnerabilities.	15 / 15
Licence declared	ProprietaryA declared licence tells you what you are actually allowed to do with the software.	5 / 5

Is Spotify safe to download?

Yes, in the sense we can actually verify: the installer downloads from scdn.co, which is a domain we have tied to Spotify AB.

Every one of the 2 installers on this page comes with the SHA-256 Spotify AB declared, so you do not have to take our word for it: hash the file you downloaded and compare.

What this does not tell you is whether the software itself is any good, or whether you want what it does once installed. A publisher can ship something you would rather not run and the download is still authentic. We answer the question we can measure and leave the other one to you.

If Windows says “Windows protected your PC” when you run it, that is SmartScreen reporting reputation, not a malware verdict — it shows up on perfectly legitimate software from small publishers and on releases that are simply new. The reverse matters more: no warning does not mean the file was checked.

How the 100/100 score is calculated · why the source matters more than the reputation

Install Spotify with winget

Windows ships with a package manager, and this program is in it. The identifier below is the one Microsoft's repository uses, which is also where the download URL and hash on this page come from.

Install

winget install --id Spotify.Spotify --exact

Upgrade later

winget upgrade --id Spotify.Spotify

Why --exact: without it winget matches on name as well as identifier, and a search that returns more than one package makes it stop and ask rather than install. Pinning the identifier is what makes the command safe to put in a script.

Not installing anything, or getting an error back? The commands that actually come up covers upgrading everything at once, what --include-unknown is for, and why winget can be missing from a machine that should have it.

Every version on record1

Every Spotify version with a published manifest, newest first. The most recent ones are listed above with their file names and hashes.

1.2.96.518.g366879e1

Similar programs we index

Matched on the categories Spotify AB and others declare in their own manifests, so the grouping is theirs rather than ours. Each one has its official URL and hash on the same terms as this page.

More programs we index

Not related to Spotify — just other entries, each with its own official URL and published hash.

Where our data comes from

Windows manifest: github.com/microsoft/winget-pkgs/tree/master/manifests/s/Spotify/Spotify/1.2.96.518.g366879e1
macOS cask: formulae.brew.sh/cask/spotify