.guide

few / answers

How do I verify SeedSigner firmware?

Short answerDownload the .img, the .sha256.txt and the .sha256.txt.sig from SeedSigner’s GitHub releases, then use Sparrow’s Tools → Verify Download. You want three green ticks.

Steps

  1. Find your board model on the back of the board.
  2. Open github.com/SeedSigner/seedsigner/releases. Newest is at the top.
  3. Under Assets, download your .img: pi02w for Zero 2 W, pi0 for Zero W/WH/v1.3.
  4. Download seedsigner.VERSION.sha256.txt and seedsigner.VERSION.sha256.txt.sig into the same folder.
  5. In Sparrow: Tools → Verify Download. Pick the .sig file.
  6. Three green ticks, signed by SeedSigner? Good. Write the card.
  7. Red or failed? Stop. Delete and download again.

FAQ

Can I verify without Sparrow?
Yes. gpg --fetch-keys https://keybase.io/seedsigner/pgp_keys.asc, then gpg --verify the .sig, then shasum -a 256 --ignore-missing --check the .txt. It must end in “: OK”.
Sparrow asks for a public key?
Download SeedSigner’s key from keybase.io/seedsigner and select it.
Why bother?
A fake image could leak your seed. The check proves the file is the one the SeedSigner team signed.

Go deeper

Free. No accounts. Markdown version for your AI.