VeraCrypt

Name: VeraCrypt
Author: IDRIX

by IDRIX · Apache 2.0

VeraCrypt is a free open source disk encryption software for Windows, Mac OSX and Linux.

Record

These URLs are the ones IDRIX declares in its own manifest. We do not proxy or shorten them, and we do not host a copy.

wixmachine scopelaunchpad.net · known platform

Run this against the file on disk. If the output does not match the hash below, the file is not what IDRIX published. Delete it.

Windows · PowerShell

Get-FileHash "VeraCrypt_Setup_x64_1.26.29.msi" -Algorithm SHA256

macOS · Linux

shasum -a 256 "VeraCrypt_Setup_x64_1.26.29.msi"

Expected output

5ba6426983123cfb92bc1f09bd888fdbc0f53f300d0d9c5da52ce3aee8d474f0

Version on Homebrew: 1.26.29
Download URL: https://launchpad.net/veracrypt/trunk/1.26.29/+download/VeraCrypt_1.26.29.dmg
SHA-256: a316c2dcb7f42eb3b0fcccbd305ae1c2abc46df6d79e9e5bf0544719d7774ed4
Install with Homebrew: brew install --cask veracrypt

Signal	Finding	Points
SHA-256 hash published	1 of 1 installers ship a SHA-256 hashWithout a published hash there is no way to prove the file you downloaded is the file the publisher built.	30 / 30
Binary provenance	1 on a recognised distribution platformThe strongest signal against a repackaged installer: the file should come from the publisher, not from a mirror nobody vouches for.	29.8 / 35
Served over HTTPS	1 of 1 over HTTPSAn installer fetched over plain HTTP can be modified in transit.	15 / 15
Licence declared	Apache 2.0A declared licence tells you what you are actually allowed to do with the software.	5 / 5

Every version with a published manifest, newest first. Useful when you need an older build for compatibility.

Windows manifest: github.com/microsoft/winget-pkgs/tree/master/manifests/i/IDRIX/VeraCrypt/1.26.29
macOS cask: formulae.brew.sh/cask/veracrypt