How To Install Bisq On Ubuntu And Verify It’s Secure (2023)

In the ever changing landscape of cryptocurrency exchanges, Bisq has long been a beacon of privacy and security scoring one of the highest ratings of all our exchanges tested. If you’re an Ubuntu user intrigued by the possibilities of using this revolutionary P2P exchange, this is the article for you.

In this simple step by step guide, we’re going to detail exactly how to install Bisq on Ubuntu as well as ensure its rock-solid security by also outlining how to fully verify all signatures and file checksums.

If you use Windows, we have a guide for that too: How To Install Bisq On Windows

What is Bisq?

Bisq is an exceptionally well developed and decentralised P2P exchange that takes the form of an application rather than a websites you visit. Available on Windows, macOS and Linux, you simply download the program, verify its files and run it. No KYC. No invasive privacy companies, just peer to peer trading goodness.

It will automatically generate a self custody wallet and randomised user profile for you. This means no personal information is required to trade and with a thriving market – especially in USA and Europe – you can easily buy up to 2 BTC per transaction with dozens of payment methods.

>> Deeper Dive: Bisq Exchange Review: The King Of Privacy And Security

Features

• Non KYC: Just download the software and run it, no accounts, no verification processes
• Decentralised: Fully decentralised with no trading servers or single servers to be blocked
• Peer-to-Peer: Trades are fully P2P again with no centralised servers recording information
• Multisig Escrow: 2-of-2 multisig escrow wallets ensure safe and efficient trading
• Private: All data is only stored locally on your computer
• Simple UI: Clear UI with extensive support videos, guides and forums for help
• Multi-platform: Supports Windows, Mac plus Ubuntu, Debian, Redhat, Fedora, Arch
• Grows With You: Start with a public server, then connect to your own Bitcoin Node later on
• FOSS: All code is free under the AGPL-3.0 license and Open Source here
• Tor: Built in Tor that’s enabled by default to enhance your privacy and security
• Fee Control: Set your Transaction Fees manually when sending to another wallet
• Coin Control: Pick and choose which UTXO’s you send when creating transactions
• Import/Export: Excellent backup and restore functions for both trading and wallet data

What Is Verification?

Verification is an important step when dealing with Crypto Exchanges software. It tests a number of things to ensure that the files you’re downloading, installing and trusting with your bitcoins are the same as what the original developer wrote and compiled. It also ensures that when you download the files from the website, they don’t get altered by a man-in-the-middle attack.

This verification process isn’t unique to Bitcoin (it exists for all other apps too), but when it comes to a Bitcoin Exchange, it’s a lot more important as you’re trusting it with something valuable so it’s important to make sure you do it every time you download and update the application. Verification of the files is done in two parts by checking that the PGP keys match and then checking that the file checksums match.

How To Install Bisq On Ubuntu

Step 1: Download The App, Signature & Key Files

We recommend doing this over Tor, using the Tor Browser. This ensures that your IP Address is hidden and that you’re downloaded Bitcoin Exchange software isn’t linked to your real world identity by ISPs.

Browse to https://bisq.network/downloads/ (be sure of spelling as well as “.network”) and download the Debian/Ubuntu .deb file. By default your browser might block the download as it’s a program and mark it as “Dangerous” but it’s fine, just click “Keep”

Also download the PGP Signature and PGP Public Key files as these are needed for the verification process. The PGP Public Key is for Alejandro García, one of the developers of Bisq and is the E222AA02.asc file that’s downloaded.

Step 2: Import The PGP Key & Verify The signature

Open up a Terminal Window and browse to the directory where all the files are. Import the key you downloaded by issuing the command: gpg –import E222AA02.asc

Once it’s imported successfully you can go ahead and verify that the Bisq-64bit-1.9.12.deb file came from the entity that’s in control of Alejandro García’s private PGP key by issuing the command: gpg –digest-algo SHA256 –verify Bisq-64bit-1.9.12.deb.asc (note this is for version 1.9.12)

If Good signature from “Alejandro García” is shown then verification of the signature is successful.

Step 3: Install The Program

Now that we’ve verified that the files we’ve downloaded are legitimate, we can go ahead and install the program just like any other program. Right Click the .deb file and choose Open With Other Application -> Software Install -> Select

The installer should open up and look as per above. Click Install and wait for the installation process to finish. Once done, close the installer and you can now open the Bisq program via its menu shortcut. However there’s one final step to do.

Step 4: Verify The Jar Files Checksum

For the last verification check we need to calculate the SHA256 Sum for the Java file we’ve just installed and compare that hash to what’s provided. This check ensures the files haven’t been altered by a malicious third party since Alejandro built them. Due to how Bisq is built and packaged, this requires a few sub-steps.

1. Open the file Home/.local/share/Bisq/Bisq-1.9.12.jar.txt. This text file contains 3 hashes all mushed together for macOS, Windows and Linux. It will just look like a bunch of random text, but leave the text file open.

2. In your Terminal window issue the command: shasum -a256 /opt/bisq/lib/app/desktop-1.9.12-all.jar (note this is for version 1.9.12). This should spit out another, smaller, bunch of random text which is the hash for the installed Java file.

3. Finally, copy the hash that’s been calculated in step 2 and search for it in your opened Bisq-1.9.11.jar.txt text file. You should see a match appear as shown in the image above, highlighted in green. This indicates that the checksums match and you’ve verified all files. Congratulations, you’ve verified and installed everything successfully!

Verifying Bisq Updates

While most applications require you to verify the files when you first install it and then also every subsequent time that it gets updated, Bisq only needs verification for the initial install. After Bisq is installed it automatically looks for new updates, notifies you of them and then downloads them over Tor and verifies the binaries for you all in one go.

This is a fantastic feature as it not only increases user privacy and security, but does so in a fully automatic and default way. Too often programs set the default setting to be less secure or private, so it’s a huge signal that the developers not only respect privacy and security, but put a priority on it too.

Dive Deeper: Bisq Ultimate Quick Start Guide For Beginners

Connection And Trade View

Once you’ve installed Bisq, the app will automatically setup Tor and connect to multiple Bitcoin Nodes by default to broadcast transactions as well as just generally run the built in Bitcoin Wallet and trade functions. It also connects to the Bisq Network, which you’re now a part of, in order to view, make and take trade offers. As said, Bisq is a truly decentralised exchange!

After syncing with the Bitcoin Mainnet via Tor, you’ll be shown the main trade view screen. From here you can sell or buy Bitcoin, change currencies and just view all the trade offers that are available in general.

In the top right hand corner you have details of the exchange rate for your chosen currency as well as details on how much is in your wallet. Down the bottom there’s also a very helpful bar of information including the fee rate for the Bitcoin Network, how many peers you’re connected to and status information in the middle such as whether you’re syncing with the Bisq DAO.

Be aware that while Bisq is syncing with the Bisq DAO, it can be very taxing on your computer CPU. It’s also not advised to make or take offers until it’s finished as otherwise it can cause problems. Just allow it 5-10 minutes for it to do its thing and then should be fine.

If you want step by step instructions on how to make your first trade using Bisq, check out our How To Buy Bitcoin On Bisq guide. It covers everything from funding your Bisq wallet, to setting up payment methods and the entire buying process start to finish.

Or if you have your own Umbrel Full Bitcoin Node, you can use our How To Connect Bisq To Umbrel guide and increase your privacy and security even more.

FAQ