32-bit
nullsoftmachine scopedownload.zotero.org · publisher-owned- SHA-256
- a95c7e3d570d495f7f90f7d79dd1aa6079a71b72ba11a65502e883c622d71d44
Zotero
by Corporation for Digital Scholarship · AGPL-3.0
100/100how this is calculated
Your personal research assistant
Record
- Latest version
- 9.0.6
- Release date
- 07 Jul 2026
- Official page
- https://www.zotero.org/
- Package identifier
- DigitalScholar.Zotero
Official downloads
These URLs are the ones Corporation for Digital Scholarship declares in its own manifest. We do not proxy or shorten them, and we do not host a copy.
64-bit
nullsoftmachine scopedownload.zotero.org · publisher-owned- SHA-256
- 973bfc96a7af8b2949bbfdc46b220366b2b204942ac30d50aef9835eb152d31c
ARM64
nullsoftmachine scopedownload.zotero.org · publisher-owned- SHA-256
- afa25c244f64c21241ccc21e9523faa426d50a7854d6c01f169ea2acb0977620
Verify the file you downloaded
Run this against the file on disk. If the output does not match the hash below, the file is not what Corporation for Digital Scholarship published. Delete it.
Windows · PowerShell
Get-FileHash "Zotero-9.0.6_x64_setup.exe" -Algorithm SHA256macOS · Linux
shasum -a 256 "Zotero-9.0.6_x64_setup.exe"Expected output
973bfc96a7af8b2949bbfdc46b220366b2b204942ac30d50aef9835eb152d31c
macOS
- Version on Homebrew
- 9.0.6
- SHA-256
- 7a9edba6b4a611f4f800ff3f159e67a62b403ceedd56bfdafc063f23e51c8db7
- Install with Homebrew
- brew install --cask zotero
How we scored this 100 out of 100
| Signal | Finding | Points |
|---|---|---|
| SHA-256 hash published | 3 of 3 installers ship a SHA-256 hashWithout a published hash there is no way to prove the file you downloaded is the file the publisher built. | 30 / 30 |
| Binary provenance | 3 on a domain owned by the publisherThe strongest signal against a repackaged installer: the file should come from the publisher, not from a mirror nobody vouches for. | 35 / 35 |
| Served over HTTPS | 3 of 3 over HTTPSAn installer fetched over plain HTTP can be modified in transit. | 15 / 15 |
| Release recency | last release about 1 months agoSoftware that has not shipped in years accumulates unpatched vulnerabilities. | 15 / 15 |
| Licence declared | AGPL-3.0A declared licence tells you what you are actually allowed to do with the software. | 5 / 5 |
Opens 8 file types
Extensions Zotero registers itself to handle.
Version history72 on record
Every version with a published manifest, newest first. Useful when you need an older build for compatibility.
- 9.0.6
- 9.0.5
- 9.0.4
- 9.0.3
- 9.0.2
- 9.0.1
- 9.0
- 8.0.4
- 8.0.3
- 8.0.2
- 8.0.1
- 8.0
- 7.0.32
- 7.0.31
- 7.0.30
- 7.0.27
- 7.0.24
- 7.0.23
- 7.0.22
- 7.0.21
- 7.0.20
- 7.0.19
- 7.0.18
- 7.0.16
- 7.0.15
- 7.0.14
- 7.0.13
- 7.0.12
- 7.0.11
- 7.0.10
- 7.0.9
- 7.0.8
- 7.0.7
- 7.0.5
- 7.0.4
- 7.0.3
- 7.0.2
- 7.0.1
- 6.0.36
- 6.0.35
- 6.0.30
- 6.0.27
- 6.0.26
- 6.0.23
- 6.0.22
- 6.0.19
- 6.0.18
- 6.0.15
- 6.0.13
- 6.0.12
- 6.0.10
- 6.0.9
- 6.0.8
- 6.0.7
- 6.0.6
- 6.0.5
- 6.0.4
- 6.0.3
- 6.0.2
- 6.0.1
- 6.0
- 5.0.96.3
- 5.0.96.2
- 5.0.96
- 5.0.95.1
- 5.0.95
- 5.0.94
- 5.0.93
- 5.0.92
- 5.0.91
- 5.0.89
- 5.0.88