Proxy tools are often repackaged by third-party sites with a trojan or miner slipped in. The SHA256 value on the official release page is the installer's “fingerprint” — matching it proves the file hasn't been touched.

Verify on Windows

After downloading, open PowerShell in the file's folder and run:

Get-FileHash .\v2rayN-windows-64.zip -Algorithm SHA256

Compare the printed hash to the one on the release page; a character-for-character match passes.

SponsoredWhere does the subscription link come from?Our partner provider gives you 1 GB of high-speed Hong Kong data at signup — import it in one click.Get high-speed nodes

Verify on macOS / Linux

shasum -a 256 v2rayN.zip
# or
sha256sum v2rayN.zip

If it doesn't match

A mismatch means the file is incomplete or tampered with — do not run it. Delete it and re-download from the official source. If it keeps failing, check whether your download source is a hijacked mirror.

Verification only proves the file matches what was officially published — not that the official build is harmless. So the first step is always confirming you're on the official release page, not a look-alike from a search engine.