Verify Many Tricks’ app downloads

Last change: Aug 4 2022
[Updated: Butler 4.4.6 • Name Mangler 3.8 • Resolutionator 2.3]

The following table provides a SHA-2 cryptographic hash for each of our apps. Huh? What’s all that gobbledygook mean? Basically, it means you can use these hash values to insure that the app(s) you download from our server match what we uploaded to our server.

How can you check your download? After downloading one of our apps, open Terminal (in Applications > Utilities), type shasum -a 256 and then press the space bar, but don’t press Return. Now drag in the disk image (DMG) you downloaded from our site, and press Return. Here’s what you’d see for Butler (version 4.4.6) if you were to do that:

$ shasum -a 256 butler446.dmg 
    d7709fe1ea4e753a51300d1c4867add7794311618b3d1f1b7c19bc8d5e0e7f22 butler446.dmg

That big string starting with 7657735… is the SHA-2 hash, and that’s the value you want to check against the table below. If the string shown in Terminal differs from what’s shown in the table below for the same app, please let us know, and do not install the app!

Main Apps Version SHA-2 Hash
Butler 4.4.6 d7709fe1ea4e753a51300d1c4867add7794311618b3d1f1b7c19bc8d5e0e7f22
Desktop Curtain 3.1.3 6e93e1bdaea2facfebf684a172d89918a982bb1d7db7f0ba77cf97caa1294adb
Keymou (Keymo) 1.2.10 6cb585cc7480168862f8ac85b6eb988d08aa6431521a9ca8c068d6380e35ec02
Leech 3.1.7 54f3e94405b2835d13de7c931f58afead125ef6da2f11df2f6ddbb3c0ef5f66
Menuwhere 2.2.1 06d9c4b4a5c6117c7b07020a5ab8248aecf6f94509ca64ffb017ad908ac153f4
Moom 3.2.25 a54f3e94405b2835d13de7c931f58afead125ef6da2f11df2f6ddbb3c0ef5f66
Name Mangler 3.8 4b45cab87dfdc2362eda7d91644147a79f444b4bceb155d74f03ca045bbb0697
Resolutionator 2.3 ab0c9ab5c7b9ebf03a478532985aab77018be7b6c71f56948014f5b2bb419862
Time Sink 2.2.3 560ebfb30b2203e3376241954c6fe118f6de47f89e27052c06128655852f5b93
Usher 2.2.1 210fab9ce91fdcb14f9e4cf894e72d0e44c157585d72fadf3998fe3a2767ac4
Witch 4.5.2 fae0a6690ff01dec8cde6d4d442b4ffa2efabdd5ead641b495115d1796f5f7e6
Baubleries Version SHA-2 Hash
Crossgrade Assistant 1.1 a8c6bad2d87541a215d8bf266ac98e064dfc864964958f3ebf184a73eaad959c
Displaperture 2.2 40a4c9d062582c1656eadba4dea7b7cf5b30e39f59a80c62296f31be3c3b4e78
Key Codes 2.2.1 a25901003045ab9079af9d91d2596602009ebe79750519add766689b4e5c0d54
Menu Bar Tint 3.1 d99e2c6fc117bdfe0ff0579171e6d4cc24b58520322ccc1bb0271f93cb647d0c
Open-With Manager 0.9.2 1cedc9a11488f704e67261483f3ac2b52039e701931133d4d0fd431024c00c62
Safari Guardian 1.2.2 cbe6588f8407eae91015378f5d02c8a2ba19cf13c37f888a892c8f39fc268a72
Service Scrubber 1.1.5 4377717775344b7ac99a577813e2ed328e0b7c283d5a43799bbf41f7537b20ea

Note: If you would like to verify an older version of any of our apps, please contact us with the app name and version number, and we’ll send you the SHA-2 hash.

SHA-2 hashes are long and complicated, so comparing them can be a bit of a pain. Here’s a way to make the task simpler. Assuming you’ve already downloaded an app, copy (double-click the hash then press Command-C) that app’s hash value from the above table.

Next, in Terminal, type expr `shasum -a 256 and press the space bar. Drag in the downloaded DMG file, which will add its complete path to what you’ve typed. Press the space bar again, then type (or paste) | cut -d ' ' -f 1` =. Finally, press the space bar once more, then press Command-V to paste your copied value. The final command will look something like this (for Butler 4.4.6):

expr `shasum -a 256 butler446.dmg | cut -d ' ' -f 1` = d7709fe1ea4e753a51300d1c4867add7794311618b3d1f1b7c19bc8d5e0e7f22

When you press Return, the output will either be 0 or 1. If it’s 1, all is fine—the above command compares the two values, and if they’re the same, it returns 1. But if you get a 0 as the returned value, then the hashes disagree. Please do not install the app you downloaded, and contact us immediately.

This table will be updated each time we update any of our apps.

Comments are closed.