Verify a Receipt · paste the receipt and check its hash yourself

Verify a receipt

A receipt is named by the SHA-256 of its body, written as canonical JSON with its keys sorted at every depth. This page recomputes that hash in your browser and, when the receipt is signed, checks its Ed25519 signature. The receipt never leaves the page.

The check runs in your browser with JavaScript on. Without it, the same check by hand: write the receipt's body as JSON with keys sorted and no spaces, hash it with SHA-256, and compare the hex with the receipt's name.