Verify NanoPocket independently

Download checksums

SHA-256 of every file served from /download, computed on 2026-10-09 from the files themselves. The first hash is the file your browser downloads; the second is the installer inside it, which is what Windows and your antivirus scan. Compute yours with certutil -hashfile <file> SHA256. A different value means it is not the file we published: do not run it, and email security@nanopocket.ai.

“Look up” opens a VirusTotal search for that hash. It uploads nothing, and it shows a report only if someone has already scanned the file.

Build manifest

Every shipping product, with the version it was last reviewed against, the platform target, the signing status, and where the checksums are published.

Code-signing & VirusTotal

What is true today, and what to do about it:

• Five installers are signed; the others are not. Nano FaceStudio Pro 1.0.2, Nano FacialEdit 1.0.3, Nano FaceSwap 1.0.6, Nano ImageTryon 1.0.1 and Nano ImageEdit 1.0.6 carry a valid Authenticode signature:NanoFaceStudioPro-1.0.2-windows.exe: signer NanoPocket AI LLC (Austin, Texas, US), issued by Microsoft ID Verified CS AOC CA 04, certificate thumbprint 9967287E9497219A1F1286B16799F2F51D74537E, timestamped by Microsoft Public RSA Time Stamping Authority, verified 2026-10-14.NanoFacialEdit-1.0.3-release.exe: signer NanoPocket AI LLC (Austin, Texas, US), issued by Microsoft ID Verified CS AOC CA 04, certificate thumbprint 9967287E9497219A1F1286B16799F2F51D74537E, timestamped by Microsoft Public RSA Time Stamping Authority, verified 2026-10-14.NanoFaceSwap-1.0.6-release.exe: signer NanoPocket AI LLC (Austin, Texas, US), issued by Microsoft ID Verified CS AOC CA 04, certificate thumbprint 9967287E9497219A1F1286B16799F2F51D74537E, timestamped by Microsoft Public RSA Time Stamping Authority, verified 2026-10-11.NanoImageTryon-1.0.1-release.exe: signer NanoPocket AI LLC (Austin, Texas, US), issued by Microsoft ID Verified CS EOC CA 03, certificate thumbprint DD19C5CF7BFB36AE9EE6154A77F1D7189270C2AC, timestamped by Microsoft Public RSA Time Stamping Authority, verified 2026-10-16.NanoImageEdit-1.0.6-release.exe: signer NanoPocket AI LLC (Austin, Texas, US), issued by Microsoft ID Verified CS EOC CA 03, certificate thumbprint DD19C5CF7BFB36AE9EE6154A77F1D7189270C2AC, timestamped by Microsoft Public RSA Time Stamping Authority, verified 2026-10-16.To check one yourself, right-click the file, choose Properties, then Digital Signatures. The certificate is short-lived by design (Microsoft Trusted Signing issues it for days, not years); the timestamp is what keeps the signature valid after it expires. We checked every other installer, including older versions of these apps, on 2026-10-09 (and Nano FaceSwap 1.0.5 on 2026-10-11): none carries a signature (the certificate table is empty). An unsigned installer from a new publisher has no reputation with Microsoft, so SmartScreen may show “Windows protected your PC” and some antivirus products may flag or quarantine it. We are signing our installers one at a time; this page lists the signer and thumbprint of each one that is signed, and until a file is listed here, do not trust any claim, from us or anyone, that it is.
• If your browser or antivirus blocks a download. Check the file against its SHA-256 in the table above. If it matches, the file is the one we published. You can then keep the download (in Chrome or Edge, open the downloads list and choose Keep) and, if SmartScreen appears, choose More info, then Run anyway. If you would rather not, you can report the false positive to your antivirus vendor; for Microsoft Defender that is the Microsoft file submission page. A matching checksum shows the file is unchanged since we published it; it does not prove the file is harmless, so use your own judgement.
• macOS. We have not published signing or notarisation details for the macOS download here. You can check it yourself after mounting the image with codesign -dv --verbose=4 NanoApp.app and spctl -a -vv NanoApp.app.
• SHA-256. Published for every download in the table above.
• VirusTotal. We have not published scan links. The “look up” links above search virustotal.com for each hash. VirusTotal's verdict is third-party; we cannot influence it.

Verify the “offline” claim yourself

“100% offline” is meaningless if you can't check it. Use any of the following standard tools to confirm zero outbound traffic during local processing.

# In an elevated PowerShell:
pktmon start --etw -p 0
# 1) Open the Nano app and run a full image / video export
# 2) Stop capture:
pktmon stop
pktmon etl2pcap PktMon.etl
# Open PktMon.pcap in Wireshark; filter:
#   ip.dst != 192.168.0.0/16 and ip.dst != 10.0.0.0/8 and ip.dst != 127.0.0.0/8
# Expected: 0 packets to public internet during processing
# (license activation + update check are separate, opt-outable network calls)

# Option A — Little Snitch / Lulu (graphical):
#   Run the app, perform a full export, observe network connections panel.
#   Expected: zero outbound during processing.

# Option B — built-in pfctl + tcpdump:
sudo tcpdump -i any -n 'not net 192.168.0.0/16 and not net 10.0.0.0/8 and not net 127.0.0.0/8'
# Then run an export. Expected: no packet output during processing.

Model provenance — every weight, every upstream

Every model in the NanoPocket pipeline is open-weight. Anyone can clone the upstream repository, run the official inference script on the same input, and compare the output to ours. This is the strongest form of independent verification available today: we cannot fake which model produced an output if you have the original weights.