Once downloaded we need to verify the signatures to make sure the developers signed this release. That should take you to a page with the public key, use Ctrl+S or Cmd+Sand save the file ThomasV.asc on your computer (preferably in the same location as the downloaded installer). Scroll down to the bottom of the page and click on the “Public Key” link (you can skip this on Linux and use gpg –import ThomasV.asc): We need the signing key of Electrum developer Thomas Voegtlin to verify the signatures. If you are taken to a new page when clicking on the signature use ctrl (or cmd) + s to save the text as a file. Make sure to download the signature as well (the link is next to the installer). Go to and download the installer for your operating system (if you are using Windows, read the note on the bottom of the download page). It offers great usability (support for multi-sig, hardware wallets etc) and you can connect it to your Bitcoin Core full node (with help of other software). Download and verify ElectrumĮlectrum is an open source wallet that has been around for many years. That way you can for example write ~\Downloads instead of the whole path C:\Users\User1\Downloads. It works on Mac, Linux and with PowerShell on Windows. The symbol ~ is used as a shortcut to the home/user folder. If you´re stuck, you can usually kill a process with Ctrl+C or Ctrl+Z. Another useful shortcut is to use the arrows up and down to toggle between previously executed commands. Usually you can paste text to a terminal with ctrl+v or with a right click on the mouse. In all examples, what´s written to the terminal is everything after the $ sign (and examples that’s specific for Windows uses the symbol >).įor example: $ cd Means that you´d write cd to the terminal and then hitting return/enter (cd is a command that changes the active directory). Linux: GnuPG comes pre-installed with Linux distributions.Īn easy way to verify a digital signature is to use a terminal (the command line). MacOS: Download and install the latest version of GPG Suite. You only need to install GnuPG and Kleopatra. If you don’t want to donate, click bank transfer on the download page to access the download. Windows: Download and install the latest version of Gpg4win. The implementation varies for different OS: We are using an implementation of the OpenPGP standard to verify signatures. This’ll for example, catch a scenario where the official website was compromised and a malicious file was uploaded or where you went to the wrong website and downloaded a malicious file there. The validation will make sure that the downloaded file was signed by the developers of the project. It’ll only take a few minutes to download the software (one time effort) and then a few seconds to verify your downloads with the digital signatures. But don’t skip it for this critical setup. This is skipped by many (I’m sometimes guilty of that myself). A computer connected to the internet (can be your normal computer).ĭownload GnuPG for validating digital signaturesĪn important part of the guide (and a great skill to have) is to know how to validate digital signatures. You need to have this at hand to finish the process:
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |