# How do I verify SeedSigner firmware?

> Download the .img, the .sha256.txt and the .sha256.txt.sig from SeedSigner’s GitHub releases, then use Sparrow’s Tools → Verify Download. You want three green ticks.

- Web version: https://few.guide/answers/verify-seedsigner-firmware.html

## Steps

1. Find your board model on the back of the board.
2. Open github.com/SeedSigner/seedsigner/releases. Newest is at the top.
3. Under Assets, download your .img: pi02w for Zero 2 W, pi0 for Zero W/WH/v1.3.
4. Download seedsigner.VERSION.sha256.txt and seedsigner.VERSION.sha256.txt.sig into the same folder.
5. In Sparrow: Tools → Verify Download. Pick the .sig file.
6. Three green ticks, signed by SeedSigner? Good. Write the card.
7. Red or failed? Stop. Delete and download again.

## FAQ

**Can I verify without Sparrow?**
Yes. gpg --fetch-keys https://keybase.io/seedsigner/pgp_keys.asc, then gpg --verify the .sig, then shasum -a 256 --ignore-missing --check the .txt. It must end in “: OK”.

**Sparrow asks for a public key?**
Download SeedSigner’s key from keybase.io/seedsigner and select it.

**Why bother?**
A fake image could leak your seed. The check proves the file is the one the SeedSigner team signed.

## Go deeper

- [Full guide, steps 6–8](https://few.guide/guides/seedsigner-sparrow.html?step=6)