how to check .dmg signature

overheadhunter · overheadhunter · commit a1180342fafa · 2025-09-18T18:58:20.000+02:00
diff --git a/docs/security/verify-installers.md b/docs/security/verify-installers.md
@@ -45,8 +45,9 @@ Our Windows installers are signed using a code signing certificate. You can veri
 On macOS, you can verify the code signature of the Cryptomator app using the built-in `codesign` utility. This verification confirms the app's authenticity and integrity:
 
 1. Open Terminal (found in Applications > Utilities).
-2. Run the following command to check the signature:
+2. Run either of the following command to check the signature:
    ```
+   codesign -dv ~/Downloads/Cryptomator-*.dmg
    codesign -dv /Applications/Cryptomator.app
    ```
 3. Verify that the output includes:
