Local-first by design
Your app library, favorites, launch history, and Pro license state are kept on your PC. The website doesn't request your Windows application list.
Know what you're running.
ASTRA is a small independent Windows project. Here's what's verified, what stays on your device, and where the current limitations are.
Verified update files
When enabled, ASTRA gets a release manifest over HTTPS, checks its cryptographic release signature and the downloaded EXE's SHA-256 hash, then asks before installation.
Choice and transparency
Disable update checks in Settings. ASTRA can work offline, and the release feed is publicly viewable without an account.
VERIFY
Check your Windows download.
For ASTRA V4.1.1, the expected SHA-256 value is:
2e8cf0b200acccf799da6d6e55a2ff6ddbb7716f6b9cf103ea280d8e77317c96Windows PowerShell can calculate a downloaded file's SHA-256:
Get-FileHash -Algorithm SHA256 -Path "C:\path\to\ASTRA-V4.1.1-License-Fix.exe"A matching hash proves the file matches the published release, but it does not independently establish that the app is safe.
LIMITATIONS
What to know before installing.
- ASTRA is currently not digitally code-signed for Windows; SmartScreen may warn about unfamiliar downloads.
- The publisher signing key used for updater manifests is separate from Windows Authenticode code signing.
- The beta license is shared and time-limited, not a personal purchase or ownership certificate.
- As with other community software, test a new release carefully and keep backups of important files.