Download Fluxer only from our download page or from our releases on GitHub until they move to Forgejo. On Windows you can check the file's signature, and on every platform you can compare the file with the SHA-256 checksum next to it on pkgs.fluxer.com.
Where are the checksums for Fluxer downloads?
Every desktop download on pkgs.fluxer.com has a checksum file at the same address with .sha256 added to the end. The checksum file has the checksum and the file name, so you can check that it belongs to the exact version you downloaded.
For example, the checksum for the Windows installer at https://pkgs.fluxer.com/desktop/stable/win32/x64/latest/setup is at https://pkgs.fluxer.com/desktop/stable/win32/x64/latest/setup.sha256.
How do I compare a checksum?
Run the command for your system on the file you downloaded, and check that the long string of letters and numbers it prints is the same as the one in the .sha256 file.
- On Windows, open PowerShell in the folder where you saved the file and run
Get-FileHash .\Fluxer-2026.1026.24218-win-x64.exe -Algorithm SHA256. - On macOS, open Terminal, go to the folder where you saved the file, and run
shasum -a 256 Fluxer-2026.1026.24218-mac-universal.dmg. - On Linux, open a terminal, go to the folder where you saved the file, and run
sha256sum Fluxer-2026.1026.24218-linux-x86_64.AppImage.
Use the name of your file in place of the example names. PowerShell shows the checksum in capital letters, which doesn't change whether it matches. If the two checksums are different, don't install the file, and download it again from our download page.
How do I check the signature on Windows?
Right-click the installer in File Explorer, open "Properties" and go to the "Digital Signatures" tab to see who signed it. Every Windows release since August 10, 2026 is signed in the name of Fluxer Platform AB. On macOS, the app is notarized by Apple, so macOS opens it without showing a warning about an unidentified developer.
How do I check Linux packages?
Our apt, dnf and pacman repositories are signed with our archive key, and the Linux repository guide gives its fingerprint so you can check it before you add the repository.
Are Fluxer builds reproducible?
Not yet. You can't yet rebuild the desktop app from source and get a file that matches ours byte for byte, so the signature and checksum are how to check a download today. The desktop app is open source, and anyone can build it themselves from GitHub.