Verify your ISO download.

Windows user? Follow these instructions instead.

Once you have downloaded an ISO, verify it for security and integrity. If you downloaded your ISO via BitTorrent, the file has already been verified as part of the download process (just make sure that you got the torrent from torrent.fedoraproject.org). Otherwise, to verify your ISO, start by downloading the proper CHECKSUM file into the same directory as the ISO:

Install DVD / Rescue CD

Live Media

Next, import Fedora's GPG key(s): 

$ curl https://fedoraproject.org/static/fedora.gpg | gpg --import

You can verify the details of the GPG key(s) here.

Now, verify that the CHECKSUM file is valid: 

$ gpg --verify *-CHECKSUM

The CHECKSUM file should have a good signature from one of the following keys:

Finally, now that the CHECKSUM file has been verified, check that the ISO's checksum matches: 

$ sha256sum -c *-CHECKSUM

If the output states that the file is valid, you're good to go!