32-bit
portablegithub.com · publisher domain- File name
- yt-dlp_x86.exe
- SHA-256
- cac3a9359367ea819289afe4c59f3e432865dafb6b08c938e2c22b4534898f12
by yt-dlp · Unlicense
A feature-rich command-line audio/video downloader.
These URLs are the ones yt-dlp declares in its own manifest. We do not proxy or shorten them, and we do not host a copy.
More than one architecture below. Check which one your Windows is if you are not sure.
Run this against the file on disk. If the output does not match the hash below, the file is not what yt-dlp published. Delete it.
Windows · PowerShell
Get-FileHash "yt-dlp.exe" -Algorithm SHA256macOS · Linux
shasum -a 256 "yt-dlp.exe"Expected output
52fe3c26dcf71fbdc85b528589020bb0b8e383155cfa81b64dd447bbe35e24b8
Got a different hash, or one you cannot place? Paste it into the hash checker and it will tell you which program and version it belongs to, past releases included.
| Signal | Finding | Points |
|---|---|---|
| SHA-256 hash published | 3 of 3 installers ship a SHA-256 hashWithout a published hash there is no way to prove the file you downloaded is the file the publisher built. | 30 / 30 |
| Binary provenance | 3 on the publisher's own domainThe strongest signal against a repackaged installer: the file should come from the publisher, not from a mirror nobody vouches for. | 35 / 35 |
| Served over HTTPS | 3 of 3 over HTTPSAn installer fetched over plain HTTP can be modified in transit. | 15 / 15 |
| Release recency | last release about 2 months agoSoftware that has not shipped in years accumulates unpatched vulnerabilities. | 15 / 15 |
| Licence declared | UnlicenseA declared licence tells you what you are actually allowed to do with the software. | 5 / 5 |
Yes, in the sense we can actually verify: the installer downloads from github.com, which is a domain we have tied to yt-dlp.
Every one of the 3 installers on this page comes with the SHA-256 yt-dlp declared, so you do not have to take our word for it: hash the file you downloaded and compare.
What this does not tell you is whether the software itself is any good, or whether you want what it does once installed. A publisher can ship something you would rather not run and the download is still authentic. We answer the question we can measure and leave the other one to you.
If Windows says “Windows protected your PC” when you run it, that is SmartScreen reporting reputation, not a malware verdict — it shows up on perfectly legitimate software from small publishers and on releases that are simply new. The reverse matters more: no warning does not mean the file was checked.
How the 100/100 score is calculated · why the source matters more than the reputation
Windows ships with a package manager, and this program is in it. The identifier below is the one Microsoft's repository uses, which is also where the download URL and hash on this page come from.
Install
winget install --id yt-dlp.yt-dlp --exactUpgrade later
winget upgrade --id yt-dlp.yt-dlpWhy --exact: without it winget matches on name as well as identifier, and a search that returns more than one package makes it stop and ask rather than install. Pinning the identifier is what makes the command safe to put in a script.
Not installing anything, or getting an error back? The commands that actually come up covers upgrading everything at once, what --include-unknown is for, and why winget can be missing from a machine that should have it.
The version history of yt-dlp, each release with the download URL the publisher declared at the time and the SHA-256 to check it against. Useful when an update breaks something and you need to downgrade to a build that worked.
We do not host any of these files and never re-upload them, which is the difference between this and an old-version download site.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 file names, so you can tell what you have. Their hashes are in the hash checker and in the downloadable archive.
Publishers take old builds offline without warning, so a link here can stop working even though the hash stays correct forever. If you already have the file, the hash is what matters: it tells you whether what you have is what they published.
Every yt-dlp version with a published manifest, newest first. The most recent ones are listed above with their file names and hashes.
Matched on the categories yt-dlp and others declare in their own manifests, so the grouping is theirs rather than ours. Each one has its official URL and hash on the same terms as this page.
Not related to yt-dlp — just other entries, each with its own official URL and published hash.