Verification Data — v1.12.0 Verified

PlatformSHA-256MD5
Chrome Extensiona6d1f9c4e2b73a8d5f…4b2a79a1f9c4e2…7f33
iOSb9e4c1a7d3f26b8e5a…9b4e71b4c1a7d3…3a65
Androidd2f8a1c6e4b79d3a5f…4b2a71d8a1c6e4…7f31
Hashes above are truncated for display. Always compare against the official release page or use the WalletGuard Verify Tool.

After downloading, compute and compare the file hash:

  1. Windows (PowerShell):
    Get-FileHash .\rainbow-installer -Algorithm SHA256
  2. macOS / Linux:
    sha256sum rainbow-installer
  3. Compare the output to the hash on this page or use the WalletGuard Verify Tool.
  4. Matching hashes ✓ — install safely. Mismatching hashes ✗ — delete the file and re-download from the official source only.

GPG signing key not publicly distributed for this wallet. Rely on SHA-256 hash verification.

GitHub — rainbow-me/rainbow

2.2k
Stars
310
Forks
MIT/OSS
License
Release: v1.12.0 · March 26, 2025 Commit: rw43ab8 Chains: Ethereum, Base, Optimism, Arbitrum

History & Background

Rainbow launched in 2020 and quickly became known for its delightful UX and NFT portfolio display. It attracted a loyal user base among Ethereum collectors and DeFi users who wanted something more polished than MetaMask, while remaining fully self-custodial and open-source.

WalletGuard tracks every official release of Rainbow and cross-references download hashes against the developer-signed artifacts so you can verify what you install.

Who should use Rainbow

Best for: Ethereum and EVM chain users who want polished UX, NFT gallery, and human-readable transaction explanations.

Custody type: Self-custody

Risk profile: Open-source hot wallet. Extension and mobile app — verify sources carefully for both.

Features

WalletConnectNFT galleryMulti-chain EVMHuman-readable txGas controlsENS support
Self-custody notice: Rainbow is a hot wallet. Your keys are stored locally on your device or browser. For large holdings, consider pairing with a hardware wallet. Never share your seed phrase with anyone.

Common scam patterns targeting Rainbow users

  • Fake browser extension clones with a near-identical name or icon, distributed through search ads.
  • Phishing websites mimicking rainbow.me with a typo or subdomain.
  • Social media accounts impersonating Rainbow support and requesting seed phrases.
  • Modified installers distributed on file-sharing sites or Telegram channels claiming to offer an "early version".

Pre-install security checklist

  • Verify you are on the correct official domain: rainbow.me
  • Compare SHA-256 hash of your download against the values on this page before running anything.
  • Check that the version number matches the latest release listed here (v1.12.0).
  • Never enter your seed phrase anywhere except the wallet application itself.
  • For significant holdings, use a hardware wallet for signing instead of a hot wallet.