Trust the hash, not the button

VNISH download security and file verification

ASIC firmware distribution is a security-sensitive workflow. Verify the exact file you received, keep miner interfaces off the public internet, and test changes on one device first.

What this site can verify

The three VOU packages linked here are hosted on vnish-software.com. Their current sizes and SHA-256 values are published in download-manifest.json and checksums.txt.

A matching hash proves that your copy matches the file published here. It does not independently prove authorship, safety, compatibility or absence of vulnerabilities.

Official-status disclosure

This is an independent reference and download hub. It does not claim to be Bitmain or the VNISH development team. Confirm product releases and model support against developer documentation before flashing production hardware.

Verify SHA-256

Windows PowerShell

Get-FileHash .\vou-win.zip -Algorithm SHA256

macOS or Linux

shasum -a 256 vou_mac.zip
sha256sum vou-win.zip

Compare every character with the published checksum. If it differs, do not open or flash the file.

Safer deployment checklist

Download only over HTTPS and check the final hostname.
Verify SHA-256 before extracting or running a package.
Scan the package with your organisation's endpoint controls.
Keep ASIC web, SSH and API interfaces on a restricted management network.
Change default credentials and do not expose miner administration to the public internet.
Back up settings and prepare recovery media before the first test.
Test one miner and monitor it before expanding the rollout.