In short
- The program is free and open source (GPL-2.0); anyone can read or rebuild its code.
- It isn’t code-signed, which is why Windows SmartScreen and macOS Gatekeeper complain. That’s a statement about a certificate, not a detection of malware.
- Verify any copy with its SHA-256 checksum. If it matches GitHub’s published value, you have the developer’s file, byte for byte.
- The one genuine risk is where you download it from: repackaged “Delta Patcher” installers on download portals aren’t the developer’s work.
What the program does on your computer
A patcher has a small job, and Delta Patcher’s behaviour matches it. Checked against the current release and its source code:
| Behaviour | What we found |
|---|---|
| Files it writes | One output file, in the same folder as the file you patch. With Backup original file off it then replaces the original. Details |
| Settings and registry | None. The program stores no configuration, which is why its options reset every launch |
| Administrator rights | Not required. It runs as a normal user from any folder you can write to |
| Installer | None. Every download is a portable .zip you extract yourself |
| Network access | The Windows builds import no networking libraries at all: no WS2_32, WinINet, WinHTTP or URLMon. There is no update check and no telemetry |
| Bundled software | None. The .zip contains the program and a changelog, nothing else |
Why your system warns you
Windows: “Windows protected your PC”
Microsoft Defender SmartScreen shows this blue box for programs that aren’t signed with a code-signing certificate and haven’t built up a download reputation. Delta Patcher’s executable is not signed, so the warning is expected. It isn’t a virus alert.
If your copy came from the official release and its checksum matches, click More info and then Run anyway. If you can’t verify where the file came from, don’t.
macOS: “can’t be opened” or “is damaged”
The macOS build isn’t notarized with an Apple Developer ID, so Gatekeeper blocks the first launch. The “damaged” wording is misleading: it usually just means the download quarantine flag is set on an app Apple hasn’t notarized. How to allow it properly.
Antivirus false positives
Patchers get flagged from time to time, because rewriting other programs’ files looks a lot like what malware does. Delta Patcher has a documented history here: older versions extracted a bundled xdelta executable at runtime, and the 3.0.0 changelog says the engine was compiled in as a library specifically “to avoid further false positive from anti virus software”. The Windows executable is also no longer compressed, for the same reason.
If your antivirus flags it today:
- Check the SHA-256 checksum against the official value.
- If it matches, it’s the developer’s file. Report the false positive to your antivirus vendor and, if you need to, add an exception for that single file.
- If it doesn’t match, delete it and download again from the official release.
- Don’t switch your antivirus off. You only ever need an exception for one file.
Verify your copy in 30 seconds
This is the check that actually settles the question, because it compares your file with the exact bytes the developer published:
Get-FileHash .\windows_bin_x86_64.zip -Algorithm SHA256shasum -a 256 "macos11+_bin_universal.zip"sha256sum linuxGTK3_bin_x86_64.zipCompare the result with the checksum on the download page, which comes from the digest GitHub publishes for each release file. A match means nothing has been altered in transit or repackaged along the way.
Official builds vs repackaged copies
The software itself is fine; the internet around it is the risk. Delta Patcher has been around since 2014 and its name appears on plenty of download portals, some of which wrap freeware in their own installers.
| Sign | What it means |
|---|---|
Download is a plain .zip with the program inside | Expected: that is how the developer ships it |
You are offered a .exe “setup” or “installer” | Not official: Delta Patcher has no installer |
| A “download manager” or extra offers appear | Not official |
| The page offers a “Pro”, “premium” or paid version | Not official: the program is free under the GPL-2.0 license |
| An Android APK or iOS app | Not official: there is no mobile build |
| Checksum matches the GitHub digest | Verified |
The only sources we link are the developer’s GitHub releases (opens external site) and the Flathub listing (opens external site). This site is an independent guide with no affiliation to the developer, and it earns nothing from your download. Weighing the program against other tools? See the alternatives; a short version of this page is in the FAQ.
The risks a patcher can’t remove
Being safe to run isn’t the same as being risk-free to use:
- Your original file can be replaced. With the backup option off, a successful patch overwrites the file you selected, and the old one isn’t sent to the Recycle Bin. Work on copies.
- A patch is only as trustworthy as its author. Delta Patcher will faithfully apply whatever changes a patch contains. Get patches from the project that made them.
- A wrong source file can produce a broken output if you turn checksum validation off. Leave it on. Why.
- The patched result is a program or game file, and running anything from an untrusted source carries the usual risks.
Can you check it yourself?
Yes, and that’s the strongest argument for trusting it. The full source is on GitHub (opens external site) under the GNU General Public License v2.0, the Windows, macOS and Linux builds are produced by a public GitHub Actions workflow in that repository, and the project has been developed in the open since 2014. If you’d rather not trust a prebuilt binary at all, you can build it yourself with CMake.
Download from the official source
Version 3.1.6 is free and open source, with builds for Windows, macOS and Linux. Downloads come straight from the developer’s official GitHub releases.