Is Hop Safe?
Why Windows warns about the installer, what Hop reads, and how to check the download yourself.
Short answer: yes. Hop is open source, so anyone can read every line of it, and nothing it reads about your PC leaves your PC. Here are the details.
"Windows protected your PC"
Windows shows this blue SmartScreen box for installers that aren't code-signed yet or that few people have downloaded so far. It doesn't mean anything was found in the file.
- Click More info.
- Click Run anyway.
Note
Code signing costs a few hundred dollars a year. Hop is free, so it isn't signed yet. As more people install it, SmartScreen stops warning on its own.
Check the download yourself
The download page lists the installer's SHA-256 checksum. In PowerShell, in the folder you downloaded to:
Get-FileHash .\HopSetup-0.1.4.exe -Algorithm SHA256If the result matches the one on the download page, your file is exactly the one built and published on GitHub.
What Hop reads, and what it sends
- Hop reads things on your PC to show them on the island: the song playing, your notifications, the app in front. None of that is sent anywhere.
- It only contacts other services for features you use, like the weather or uploading a clip you chose to upload.
- No ads, no tracking, no account.
Every detail is in the Privacy Policy.
No admin rights
Hop installs just for you, in your own user folder. It never asks for administrator rights, and it uninstalls cleanly from Windows' Installed apps.
Read the code
All of Hop is on GitHub under the MIT License. You can also build it yourself from the source.
68 of 69 security vendors found nothing in HopSetup-0.1.4.exe.
DeepInstinct flagged it (machine-learning). AI-based scanners often flag new, unsigned apps.
- Scanned
- Oct 5, 2026
- Skipped
- 6 can't scan .exe
Something wrong or missing on this page? Tell us on GitHub.
On this page
- "Windows protected your PC"
- Check the download yourself
- What Hop reads, and what it sends
- No admin rights
- Read the code
68 of 69 security vendors found nothing in HopSetup-0.1.4.exe.
DeepInstinct flagged it (machine-learning). AI-based scanners often flag new, unsigned apps.
- Scanned
- Oct 5, 2026
- Skipped
- 6 can't scan .exe