Verify the firmware

Every image on the download page comes with a SHA-256 checksum and a signature. Check at least the checksum before you flash.

Checksum

System	Command
macOS / Linux	shasum -a 256 <file>
Windows (PowerShell)	Get-FileHash <file>

The result must match the SHA-256 shown under that file on the download page. If it doesn’t, download again and don’t flash it.

Signature (optional)

On any OpenWrt device:

1. Save the signing public key from the download page (both lines) as onedux.pub.
2. Download the matching .sig file next to the image.
3. Run usign -V -m <file> -p onedux.pub. It prints OK if the file was signed by OneDux.