Skip to content
CachyOS

Downloads and Validation

Official ISO Sources

Section titled “Official ISO Sources”

CachyOS ISO can be obtained from the following sources:

Verifying ISO Integrity with SHA256

Section titled “Verifying ISO Integrity with SHA256”

Current ISO Version: 260308

SHA256 Hash: 69f1ffbded158d4d95e6567e994b1813d0d040d323742aef9f489a0b71ad1d29

  1. Download the file containing the SHA256 hash (Open it with a text editor, e.g., Notepad).
  2. Open CMD or PowerShell as Administrator and navigate to the path where the ISO and SHA256 files are stored.
  3. Execute the following command:
    Terminal window
    # Example:
    certUtil -hashfile cachyos-desktop-linux-260308.iso SHA256
  4. Compare the certUtil hash output to the one from the downloaded file in Step 1. If they match, you may proceed with the CachyOS installation.

Verify ISO Image Authenticity (Linux)

Section titled “Verify ISO Image Authenticity (Linux)”

To verify the authenticity of the ISO file:

  1. Import the GPG key as a reference to compare against:

    Terminal window
    gpg --keyserver hkps://keys.openpgp.org --recv-key F3B607488DB35A47

  2. Download the ISO file and its .sig signature file and run the following command (replace full_iso_name.iso with the actual ISO filename):

    Terminal window
    gpg --verify full_iso_name.iso.sig full_iso_name.iso

    If you get a Good signature output, the ISO file is genuine:

    gpg: Signature made dom 08 mar 2026 10:39:18 -03
    gpg:                using RSA key 882DCFE48E2051D48E2562ABF3B607488DB35A47
    gpg: Good signature from "CachyOS <admin@cachyos.org>" [unknown]
    gpg: WARNING: This key is not certified with a trusted signature!
    gpg:          There is no indication that the signature belongs to the owner.
    Primary key fingerprint: 882D CFE4 8E20 51D4 8E25  62AB F3B6 0748 8DB3 5A47