Verify Many Tricks’ app downloads

Last change: February 2 2021
[Updated: Displaperture • Witch]

The following table provides a SHA-2 cryptographic hash for each of our apps. Huh? What’s all that gobbledygook mean? Basically, it means you can use these hash values to insure that the app(s) you download from our server match what we uploaded to our server.

How can you check your download? After downloading one of our apps, open Terminal (in Applications > Utilities), type shasum -a 256 and then press the space bar, but don’t press Return. Now drag in the disk image (DMG) you doawnloaded from our site, and press Return. Here’s what you’d see for Butler (version 4.1.23) if you were to do that:

$ shasum -a 256 butler432.dmg 
    c2da20da2befe4ed4262bf77b6e6da5d1ca7449b0f7fd4af64d16cea6f4f1637 butler432.dmg

That big string starting with e1e6231… is the SHA-2 hash, and that’s the value you want to check against the table below. If the string shown in Terminal differs from what’s shown in the table below for the same app, please let us know, and do not install the app!

Main Apps Version SHA-2 Hash
Butler 4.3.3 8541af85e4b6c827cdeb91bec1ce31acbaf4727fb9c97dca976d260d7c211b37
Desktop Curtain 3.0.9 7423d3f2b1b58f385192d70491097fe9176f11c44e8bf9c0241b2178adfc97a9
Keymou (Keymo) 1.2.8 93d83f49af34aa9c193a9e6c267e72ad2453f6641b8eaf4660a5c613ace9cb38
Leech 3.1.4 1bbb16f6e759a96c0105898100b5cd9361463e0f15129adf6c607f0f3bee7009
Moom 3.2.20 924a08f89379a4c5ade4b079af9e41fb91ec0297d291d123f29800d18c187def
Name Mangler 3.6 920089b29f13e7a2036898b7dd720367698e92c1bbbb2b417bdad06a0c3e2cfa
Resolutionator 2.0.1 7200f76f043426cf5d03e83465265b1b5ad1906b08b224373b642f978fe61991
Time Sink 2.0.2 f0c9ed65be6e6cb01562619184b19d171d695174bbb49c61ec59c391b6fc8749
Usher 1.1.17 304c406d9034d83ab8983cebdaed3994ee13791069e1af9dce2590a14af1c3af
Usher 2 Beta 4579 02fcec6976974dca685b4e25ae73303af91a50f8147d0fa870b7761e1def3de2
Witch 4.3.8 8551d35727d28905be39f3f54cccb03789fb71b982f128d48167fefb8f1c5c83
Baubleries Version SHA-2 Hash
Displaperture 2.1 dfb31b4b72bb498fc27b9431074ec789c1e712ab60b238360ef472806822d5a7
Key Codes 2.2 3ebedb96f14da9a9d9691711c32cb1bb275bf8a3bd51fcbd59f4e0a0b12daf06
Menu Bar Tint 2.0.1 e81dc581fb22f3989c067f0feffd555003dc976d2ddcf06edc3fcbbf98b54c9b
Open-With Manager 0.9.2 1cedc9a11488f704e67261483f3ac2b52039e701931133d4d0fd431024c00c62
Safari Guardian 1.2.2 cbe6588f8407eae91015378f5d02c8a2ba19cf13c37f888a892c8f39fc268a72
Service Scrubber 1.1.5 4377717775344b7ac99a577813e2ed328e0b7c283d5a43799bbf41f7537b20ea

Note: If you would like to verify an older version of any of our apps, please contact us with the app name and version number, and we’ll send you the SHA-2 hash.

SHA-2 hashes are long and complicated, so comparing them can be a bit of a pain. Here’s a way to make the task simpler. Assuming you’ve already downloaded an app, copy (double-click the hash then press Command-C) that app’s hash value from the above table.

Next, in Terminal, type expr `shasum -a 256 and press the space bar. Drag in the downloaded DMG file, which will add its complete path to what you’ve typed. Press the space bar again, then type (or paste) | cut -d ' ' -f 1` =. Finally, press the space bar once more, then press Command-V to paste your copied value. The final command will look something like this (for Moom 3.2.6):

expr `shasum -a 256 moom326.dmg | cut -d ' ' -f 1` = 482dd69788ac707f13483631eae5aaef7fcc356b688d51e359a3b69fc531a143

When you press Return, the output will either be 0 or 1. If it’s 1, all is fine—the above command compares the two values, and if they’re the same, it returns 1. But if you get a 0 as the returned value, then the hashes disagree. Please do not install the app you downloaded, and contact us immediately.

This table will be updated each time we update any of our apps.

Comments are closed.