32-bit
zipgithub.com · known platform- File name
- syncthing-windows-386-v2.1.3.zip
- SHA-256
- 97f865cfd93726696624e6611cecf7f1535b846a8c213bc20ea878b373adf706
by The Syncthing Authors · MPL-2.0
Open Source Continuous File Synchronization
These URLs are the ones The Syncthing Authors declares in its own manifest. We do not proxy or shorten them, and we do not host a copy.
More than one architecture below. Check which one your Windows is if you are not sure.
Run this against the file on disk. If the output does not match the hash below, the file is not what The Syncthing Authors published. Delete it.
Windows · PowerShell
Get-FileHash "syncthing-windows-amd64-v2.1.3.zip" -Algorithm SHA256macOS · Linux
shasum -a 256 "syncthing-windows-amd64-v2.1.3.zip"Expected output
c0b79cffa6ce5dad5ed41ede86454f3325d13ccac33447a528cb59d65fbc3a21
Got a different hash, or one you cannot place? Paste it into the hash checker and it will tell you which program and version it belongs to, past releases included.
The macOS build as Homebrew declares it, with the same treatment as the Windows side: the publisher's own URL and a hash to check it against.
| Signal | Finding | Points |
|---|---|---|
| SHA-256 hash published | 3 of 3 installers ship a SHA-256 hashWithout a published hash there is no way to prove the file you downloaded is the file the publisher built. | 30 / 30 |
| Binary provenance | 3 on a recognised distribution platformThe strongest signal against a repackaged installer: the file should come from the publisher, not from a mirror nobody vouches for. | 29.8 / 35 |
| Served over HTTPS | 3 of 3 over HTTPSAn installer fetched over plain HTTP can be modified in transit. | 15 / 15 |
| Release recency | last release about 0 months agoSoftware that has not shipped in years accumulates unpatched vulnerabilities. | 15 / 15 |
| Licence declared | MPL-2.0A declared licence tells you what you are actually allowed to do with the software. | 5 / 5 |
Extensions Syncthing registers itself to handle.
The installer comes from a recognised distribution platform rather than The Syncthing Authors's own domain. That is normal for this kind of software and not a red flag by itself.
Every one of the 3 installers on this page comes with the SHA-256 The Syncthing Authors declared, so you do not have to take our word for it: hash the file you downloaded and compare.
What this does not tell you is whether the software itself is any good, or whether you want what it does once installed. A publisher can ship something you would rather not run and the download is still authentic. We answer the question we can measure and leave the other one to you.
If Windows says “Windows protected your PC” when you run it, that is SmartScreen reporting reputation, not a malware verdict — it shows up on perfectly legitimate software from small publishers and on releases that are simply new. The reverse matters more: no warning does not mean the file was checked.
How the 95/100 score is calculated · why the source matters more than the reputation
Windows ships with a package manager, and this program is in it. The identifier below is the one Microsoft's repository uses, which is also where the download URL and hash on this page come from.
Install
winget install --id Syncthing.Syncthing --exactUpgrade later
winget upgrade --id Syncthing.SyncthingWhy --exact: without it winget matches on name as well as identifier, and a search that returns more than one package makes it stop and ask rather than install. Pinning the identifier is what makes the command safe to put in a script.
Not installing anything, or getting an error back? The commands that actually come up covers upgrading everything at once, what --include-unknown is for, and why winget can be missing from a machine that should have it.
The version history of Syncthing, each release with the download URL the publisher declared at the time and the SHA-256 to check it against. Useful when an update breaks something and you need to downgrade to a build that worked.
We do not host any of these files and never re-upload them, which is the difference between this and an old-version download site.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 file names, so you can tell what you have. Their hashes are in the hash checker and in the downloadable archive.
Publishers take old builds offline without warning, so a link here can stop working even though the hash stays correct forever. If you already have the file, the hash is what matters: it tells you whether what you have is what they published.
Every Syncthing version with a published manifest, newest first. The most recent ones are listed above with their file names and hashes.
Matched on the categories The Syncthing Authors and others declare in their own manifests, so the grouping is theirs rather than ours. Each one has its official URL and hash on the same terms as this page.
Not related to Syncthing — just other entries, each with its own official URL and published hash.