Why we link to publishers, and how to check a download yourself
What an official source actually guarantees, what it does not, and a short verification routine you can use on any site including this one.
Every outbound link on InstallShelf goes to the company, foundation or community that makes the software. We host no files, run no mirror and operate no download redirect. That design choice has one clear benefit and one honest limitation.
The benefit: you always know whose file you are running, and the publisher is the first place a security fix appears. The limitation: publisher pages are sometimes slower, plainer and more confusing than a commercial download portal. We think that is a fair price, and this page explains how to verify the claim yourself rather than take our word for it.
What official actually guarantees
It guarantees attribution: the file came from the party responsible for the software, under their licence and their privacy policy. It does not guarantee the file is free of bugs, that the publisher will never change its practices, or that the page will be pleasant to use. No source guarantees those things.
It also means we never see or modify the installer. We cannot add a toolbar to a file we do not handle, and we cannot quietly swap a version. If a publisher changes its download page, the correct response is to fix our link, not to find a friendlier host.
The tools this step calls for, with their real licence and platform details:
| Program | Licence / price | Platforms | Why it is on the list |
|---|---|---|---|
| Firefox Publisher's site ↗ | Free · Open source | Windows, macOS, Linux, Android, iOS | The safest default for most people. It runs its own engine instead of Chromium, blocks trackers out of the box, and carries extensions the Chromium side is busy removing. Slightly rougher on a handful of Google properties. |
| VLC Media Player Publisher's site ↗ | Free · Open source | Windows, macOS, Linux, Android, iOS | Plays the file Windows Media Player refuses to. No codec hunting, no third-party packs, no ads. It also handles DVD, network streams and screen capture, which is more than you will ever need. |
| 7-Zip Publisher's site ↗ | Free · Open source | Windows, Linux | The first thing to install on any new PC. Unpacks everything, compresses better than WinRAR, and has never shipped a bundled toolbar in twenty-five years. Plain interface, zero nonsense. |
A verification routine that takes a minute
Read the address bar and confirm the domain belongs to the maker. For open-source projects, look for a release page or a checksum published alongside the download; comparing a SHA-256 hash is the strongest check available to a normal user. Be suspicious of any page with several competing Download buttons, and always open the advanced install screen.
If a link on this site is wrong, out of date, or points somewhere you would not trust, tell us. We would rather delete an entry than defend it, and the About page says so.
The tools this step calls for, with their real licence and platform details:
| Program | Licence / price | Platforms | Why it is on the list |
|---|---|---|---|
| 7-Zip Publisher's site ↗ | Free · Open source | Windows, Linux | The first thing to install on any new PC. Unpacks everything, compresses better than WinRAR, and has never shipped a bundled toolbar in twenty-five years. Plain interface, zero nonsense. |
| Rufus Publisher's site ↗ | Free · Open source | Windows | Writes a Windows or Linux ISO to a USB stick in a couple of minutes, faster than most vendor tools, and can bypass the Windows 11 TPM and account requirements if you ask it to. No install needed. |
Why there are no mirrors or reuploads here
A mirror is a second party with the ability to change the file and no obligation to tell you. That is exactly the risk this site was built to remove. It is also why we exclude software with a history of bundled installers, even when the current version is clean: the distribution practice is part of the product.
The tools this step calls for, with their real licence and platform details:
| Program | Licence / price | Platforms | Why it is on the list |
|---|---|---|---|
| Firefox Publisher's site ↗ | Free · Open source | Windows, macOS, Linux, Android, iOS | The safest default for most people. It runs its own engine instead of Chromium, blocks trackers out of the box, and carries extensions the Chromium side is busy removing. Slightly rougher on a handful of Google properties. |
| Thunderbird Publisher's site ↗ | Free · Open source | Windows, macOS, Linux | The desktop mail client that stopped the argument: handles any IMAP or Exchange account, has a real calendar, and runs your own rules locally. Newer versions are fast again after years of neglect. |
Mistakes to avoid
- Trusting a page because it looks more professional than the publisher's own site.
- Skipping a published checksum because the download completed successfully. Those are different claims.
- Assuming a download portal's virus-free badge means the installer contains no unwanted extras.
Questions people ask
Do you earn anything from these links?
The About page states the current position. Every link is to the publisher's own site and no payment influences ranking or inclusion.
What if an official page is down?
Wait or use the publisher's documented alternative, such as a GitHub release page. Do not substitute an unofficial mirror.
Related guides
Or see all guides and category explainers.
How to read this page. How to read this page. Platform, licence and publisher details come from our directory data. Where an independent review, audit or survey is mentioned, it is summarised in our own words with the source named and linked; our /sources page sets out that policy. The recommendation, the trade-offs and every 'skip it if' line are our editorial judgement. We do not run benchmarks, publish measured performance figures or host installers, and every download link goes to the publisher's own site. If a detail is out of date, our About page explains how to tell us.