Download Sparrow Wallet and verify the GitHub build

Sparrow is for people who already care about PSBTs. Download like one: official release assets, hash, then GPG — not a “Sparrow setup” from Bing.

Security Guides · 7 min · Updated Jul 2026 · Expert

A correct Sparrow Wallet download is the file on sparrowwallet.com or github.com/sparrowwallet/sparrow/releases for version 2.1.3 — Sparrow-2.1.3.exe, .dmg, or .tar.gz.

The review page explains why people use Sparrow. This page only gets you the real build. Hash here, then GPG if you are doing this properly.

Do this now

  1. Take the release asset from Sparrow. Use sparrowwallet.com/download or the GitHub release tagged 2.1.3. Download the installer and the signature files Sparrow publishes next to it.
  2. SHA-256 on this page. Drop Sparrow-2.1.3.exe into the verifier with sparrow_windows. Mismatch: stop. Do not run a “fixed” exe from a comment thread.
  3. GPG on your OS. Verify the detached signature with the key fingerprint published on sparrowwallet.com (catalog id 0xCEF5A1E4A7BF0F52 — confirm on their site). Then connect Sparrow to your own node if that is your threat model.

Sparrow 2.1.3 release files

AssetPresetFollow-up
Sparrow-2.1.3.exesparrow_windowsGPG .asc / .sig
Sparrow-2.1.3.dmgsparrow_macGPG + codesign optional
sparrow-2.1.3.tar.gzsparrow_linuxGPG
GPG steps: GPG-verify Sparrow. Product review: Sparrow review.

What a Sparrow hash cannot do

It cannot prove your Electrum server is honest. It cannot prove a hardware signer is genuine. It only proves this Sparrow build matches a digest.

Sparrow talking to a random public server is a privacy choice, not a download problem.

Do not download “Sparrow + preset config” zip packs. Those configs can point at a malicious server or swap a binary.
Live artifact · preset sparrow_windows

Catalog hash loads from WalletGuard’s wallet database. Confirm the same string on the developer’s signed release before you install.

Hash this file in the browser

Nothing is uploaded. Web Crypto SHA-256 stays on this device.

·
SHA-256

Compare to the catalog hash

This page pre-selects sparrow_windows. Switch wallets if you grabbed a different build.

Preset hash: loads from catalog

No file selected yet.

Open the full verifier with this preset →

Frequently asked questions

Where do I download official Sparrow Wallet?

sparrowwallet.com or the sparrowwallet/sparrow GitHub releases. WalletGuard’s hub links those official assets; we do not host them.

Is GitHub safe for Sparrow?

The official repo is sparrowwallet/sparrow. A fork named sparrow-wallet-exe is not the same project. Prefer the files the official site links.

Do I need GPG if SHA-256 matches?

The hash proves integrity against a string. GPG proves who signed that release. Sparrow users who run their own node usually want both.

Open verifier · sparrow_windows