HandBrake
The open source video transcoder

Open PGP

This page is also mirrored on our GitHub Wiki

About OpenPGP

The HandBrake Team cryptographically signs its downloads using the OpenPGP standard. You can use OpenPGP tools to verify that the files you download come from us.

OpenPGP tools
For Mac: https://gpgtools.org/

For Windows: https://www.gpg4win.org/

Additional tools may be found at http://openpgp.org/software.

HandBrake Team OpenPGP public key

-----BEGIN PGP PUBLIC KEY BLOCK-----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=2vLY
-----END PGP PUBLIC KEY BLOCK-----

Save the key (copy and paste) to a new raw text file called handbrake.gpg. You may then import the key using your OpenPGP-compatible software's graphical interface, if available. Otherwise, use your terminal application to import the key to GPG (see tools section above) by running the command gpg2 --import handbrake.gpg || gpg --import handbrake.gpg.

You can print the imported key's fingerprint and unique id by running gpg2 --fingerprint HandBrake || gpg --fingerprint HandBrake


$ gpg2 --fingerprint HandBrake || gpg --fingerprint HandBrake
pub rsa4096 2017-05-08 [SC] [expires: 2021-05-08]
1629 C061 B3DD E7EB 4AE3 4B81 021D B8B4 4E4A 8645
uid [ unknown] HandBrake Team
sub rsa4096 2017-05-08 [E] [expires: 2021-05-08]



Verifying downloaded files

First download the signature file (.sig) that matches your HandBrake download. Signatures are available on the Releases page.

Verify using your terminal application to run the command gpg2 --verify signature-file || gpg --verify signature-file, replacing "signature-file" with the path to the appropriate .sig file.

If the downloaded file is valid, GPG will report gpg: Good signature from "HandBrake Team ".


Advertisements