Download Caribou

Get the binary — and verify it before you run it. When it holds your money, the checksum is the download.

No packaged releases yet. Caribou is in active development and hasn't cut its first tagged release. Until then, build from source or watch the releases page. When releases land, each will publish per-platform archives named caribou-<os>-<arch>-v<version> plus a signed sha256 manifest — the verification steps below are how you'll check them.

Linux

amd64.tar.gz arm64.tar.gz riscv64.tar.gz

A future .deb will not be named caribou — that name already belongs to GNOME's accessibility package in apt. Package name TBD.

Windows

amd64.zip

Unsigned for now: SmartScreen may warn. Choose More info → Run anyway, then confirm the checksum below is the real integrity check.

macOS

Apple silicon (arm64).tar.gz Intel (amd64).tar.gz

Unsigned for now: Gatekeeper will block a double-click. Right-click → Open, then Open in the dialog. Verify the checksum regardless.

BSD

FreeBSD amd64.tar.gz OpenBSD amd64.tar.gz OpenBSD arm64.tar.gz

Verify your download

Every release publishes a sha256 manifest alongside the archives. Compare it before you run anything.

Linux / BSD

# from the folder holding the archive and the manifest

sha256sum -c caribou-linux-amd64-v<version>.sha256

macOS

shasum -a 256 -c caribou-darwin-arm64-v<version>.sha256

Windows (PowerShell)

# compare the printed hash against the manifest line

CertUtil -hashfile caribou-windows-amd64-v<version>.zip SHA256

A caribou-…: OK result means the archive matches the manifest. When a release-signing key is in place, its public key will be published here and in the repository, so each channel vouches for the other. Build-from-source instructions are in the repository README.

Mobile

Mobile wallets are in development. There are no app-store listings yet, and we won't post fake badges for ones that don't exist. Watch the repository for progress.