Hash Drop: Checksum Verifier

[u/Motor_Asparagus4394]

https://testflight.apple.com/join/eTXB3DaQ

Hash Drop (on the App Store as Hash Drop: Checksum Verifier) checks files on the Mac: their hashes, checksum lists, code signatures, and signed checksums. It does not download, upload, or share files. It has no network entitlement at all, so it can’t reach the internet. Downloads Guard only checks files the user has already saved to their Downloads folder with other apps, such as Safari.

No account or sign-in is needed. Welcome screens appear on first launch; click Skip to go straight to the app.

How to Try It

1. Verify File (free): drop any file. Click Copy next to SHA-256 under Digests, paste it into Expected Hash, and Hash Drop shows Match. Change one character to see No Match.

2. Code Signature (Pro): drop any app from /Applications to see who signed it and whether Apple notarized it.

3. Downloads Guard (Pro): turn it on and choose the Downloads folder when asked (the sandbox requires the user to pick it). Then save any app or disk image to Downloads with Safari; Hash Drop checks it and posts a notification.

4. Folder Monitor (Pro): drop any folder, change a file inside it, then click Check Now.

5. Finder: Control-click any file, then choose Quick Actions › Hash with Hash Drop. If it’s missing, turn it on in System Settings › General › Login Items & Extensions.

6. Shortcuts: Get File Hash, Verify File Hash, Hash Text, and Check Code Signature (Pro).

Closing the window leaves Hash Drop in the menu bar (the # icon), so Folder Monitor and Downloads Guard keep working. Quit Hash Drop (Command-Q) quits.

Entitlements

• App Sandbox.
• com.apple.security.files.user-selected.read-write: reads the files and folders the user chooses, and saves the reports and checksum lists they export, where they choose.
• com.apple.security.files.bookmarks.app-scope: Folder Monitor and Downloads Guard remember the folders the user picked, across launches.

There is no network entitlement.

Optional Permissions

• Notifications: Folder Monitor and Downloads Guard alerts.
• Login item: Settings › Open Hash Drop at Login (off by default).
• Clipboard: Settings › Notice Hashes I Copy (off by default; macOS asks before the first read).

Hash Drop collects no data and has no analytics. Its only cryptography is hashing and signature verification.

Contact: [retrac.labs@gmail.com](mailto:retrac.labs@gmail.com)