Source and binary executables are signed by the release manager or binary builder using theirOpenPGP key. Release files for currently supported releases are signed by the following:
Thomas Wouters (3.12.x and 3.13.x source files and tags) (key id: A821E680E5FA6305)Pablo Galindo Salgado (3.10.x and 3.11.x source files and tags) (key id: 64E628F8D684696D)Steve Dower (Windows binaries) (key id: FC62 4643 4870 34E5)艁ukasz Langa (3.8.x and 3.9.x source files and tags) (key id: B269 95E3 1025 0568)Ned Deily (macOS binaries, 3.7.x / 3.6.x source files and tags) (key ids: 2D34 7EA6 AA65 421D and FB99 2128 6F5E 1540Larry Hastings (3.5.x source files and tags) (key id: 3A5C A953 F73C 700D)Benjamin Peterson (2.7.z source files and tags) (key id: 04C3 67C2 18AD D4FF and A4135B38)Release files for older releases which have now reached end-of-life may have been signed by one of the following:
Anthony Baxter (key id: 0EDD C5F2 6A45 C816)Georg Brandl (key id: 0A5B 1018 3658 0288)Martin v. L枚wis (key id: 6AF0 53F0 7D9D C8D2)Ronald Oussoren (key id: C9BE 28DE E6DF 025C)Barry Warsaw (key ids: 126E B563 A74B 06BF, D986 6941 EA5B BD71, and ED9D77D5)You can import a person's public keys from a public keyserver network serveryou trust by running a command like:
gpg --recv-keys [key id]or, in many cases, public keys can also be foundat keybase.io.On the version-specific download pages, you should see a link to both thedownloadable file and a detached signature file. To verify the authenticityof the download, grab both files and then run this command:
gpg --verify Python-3.6.2.tgz.ascNote that you must use the name of the signature file, and you should use theone that's appropriate to the download you're verifying.
(These instructions are geared toGnuPG and Unix command-line users.)Windows(Updated for Azure Trusted Signing, which applies for all releases chronologically from 3.14.0a1)The Windows installers and all binaries produced as part of each Python release are signed using an Authenticode signing certificate issued to the Python Software Foundation. This can be verified by viewing the properties of any executable file, looking at the Digital Signatures tab, and confirming the name of the signer. Our full certificate subject is CN = Python Software Foundation, O = Python Software Foundation, L = Beaverton, S = Oregon, C = US and as of 14th October 2024 the certificate authority is Microsoft Identity Verification Root Certificate Authority. Our previous certificates were issued by DigiCert.Note that some executables may not be signed, notably, the default pip command. These are not built as part of Python, but are included from third-party libraries. Files that are intended to be modified before use cannot be signed and so will not have a signature.
macOS Installer PackagesInstaller packages for Python on macOS downloadable from python.org are signed withwith an Apple Developer ID Installer certificate.
As of Python 3.11.4 and 3.12.0b1 (2023-05-23), release installer packages are signed with certificates issued to the Python Software Foundation (Apple Developer ID BMM5U3QVKW)).Installer packages for previous releases were signed with certificates issued to Ned Deily (DJ3H93M7VJ).Other Useful ItemsLooking for 3rd party Python modules? ThePackage Index has many of them.You can view the standard documentationonline, or you can download itin HTML, PostScript, PDF and other formats. See the mainDocumentation page.Information on tools for unpacking archive filesprovided on python.org is available.Tip: even if you download a ready-made binary for yourplatform, it makes sense to also download the source.This lets you browse the standard library (the subdirectory Lib)and the standard collections of demos (Demo) and tools(Tools) that come with it. There's a lot you can learn from thesource!There is also a collection of Emacs packagesthat the Emacsing Pythoneer might find useful. This includes majormodes for editing Python, C, C++, Java, etc., Python debuggerinterfaces and more. Most packages are compatible with Emacs andXEmacs.Want to contribute?Want to contribute? See the Python Developer's Guideto learn about how Python development is managed.