# Installing from source, how to verify download **URL:** \ **Category:** Uncategorized\ **Created:** [November 7, 2019, 4:26pm UTC](https://bisq.community/t/installing-from-source-how-to-verify-download/8678 "2019-11-07T16:26:25Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![sleepyhead](https://bisq.community/letter_avatar/sleepyhead/32/6_22734026db12803ebb3e059622ac3534.png) [@sleepyhead](https://bisq.community/u/sleepyhead)\ **Post date:** [November 7, 2019, 4:26pm UTC](https://bisq.community/t/installing-from-source-how-to-verify-download/8678/1 "2019-11-07T16:26:25Z")
I’d like to install Bisq from source on Linux. How do I verify that the source code I’ve downloaded is has not been tampered? I see the Verification steps provided at [https://github.com/bisq-network/bisq/releases/](https://github.com/bisq-network/bisq/releases/), but those instructions assume that you’ve downloaded a binary package, not source code. Thanks! ---
**Author:** ![sqrrm](https://bisq.community/letter_avatar/sqrrm/32/6_22734026db12803ebb3e059622ac3534.png) [@sqrrm](https://bisq.community/u/sqrrm)\ **Post date:** [November 7, 2019, 4:50pm UTC](https://bisq.community/t/installing-from-source-how-to-verify-download/8678/2 "2019-11-07T16:50:49Z")
I think it should be possible to verify the commits as signed by the contributors as claimed, if you checkout the git repo. Don’t know how to do it and perhaps it would be good to release the source signed as well. ---
**Author:** ![extradarkchocolate](https://bisq.community/letter_avatar/extradarkchocolate/32/6_22734026db12803ebb3e059622ac3534.png) [@extradarkchocolate](https://bisq.community/u/extradarkchocolate)\ **Post date:** [April 21, 2020, 7:42pm UTC](https://bisq.community/t/installing-from-source-how-to-verify-download/8678/3 "2020-04-21T19:42:19Z")
I agree that source tarballs should be signed also