Can you trust the download?
Updated .
PDF24 Creator is freeware from Geek Software, and the official installers are digitally signed. Version 11.32.0, released 2 November 2026, signs the installer engine as well. Files you merge, compress, or OCR stay on the PC. A scanner alert can still be wrong, and it can also be a reason to stop and read the signature before you trust the file.
Legal use
You may use PDF24 Creator for private work and for commercial work. The publisher states that companies, authorities, and agencies can use it free of charge, with no functional limit and no account. Citrix use is something the publisher says many companies already do.
You may not use it to forge a document, to hide a change in a file you are not allowed to change, or to bypass a password on a PDF you are not allowed to open. Applying a signature means using a certificate you hold. Copying someone else's signature image onto a contract is not what the PAdES option is for. The program will not decide that for you.
Windows is a trademark of Microsoft. Acrobat is a trademark of Adobe. Those names appear on this site so the comparison and the printer steps are specific.
Ethical use
The reason to pick the desktop program, instead of a random web converter, is that the file stays on the machine. Keep customer invoices, ID scans, and contracts on computers you administer. Do not wrap the installer with extra offers and pass that bundle on. Do not describe an old catalog build, such as the 11.29.1 MSI that was still listed in a February 2026 scan, as if it were 11.32.0.
A public reply from the developer said the desktop program is funded by ads on the publisher's website, not by a fee in the app and not by uploading your documents. That is a business model you can judge for yourself. It is not a hidden charge inside 11.32.0.
Version 11.32.0 fixed a real injection bug: Create invoice visually used to insert fields from an invoice file as markup, so a crafted invoice could run script in the Toolbox. Those fields are now plain text. If you open invoices from other people, run 11.32.0, not an older Toolbox.
Source and components
PDF24 Creator is not open source. Geek Software does not publish the Creator program as a tree you can compile. What 11.32.0 does publish, in the installer and in Settings, is which bundled components are on, and whether you would rather use a copy already on the PC.
| Piece | License position on this page | Your switch in 11.32.0 |
|---|---|---|
| PDF24 Creator | Freeware from Geek Software. Not a public source release. | Install, or do not. EXE or MSI. |
| Ghostscript | Bundled open component used for parts of conversion and quality. | Leave it, remove it, or point at a system copy. |
| qpdf | Bundled open component for PDF file operations. | Same three choices. |
| Tesseract | Bundled open component for OCR. | Same three choices. |
| OpenJDK | Bundled Java runtime. Needed for veraPDF and other Java tools. Not in 9.20.0. | Bundled, system, or off. x86 builds include a 32-bit runtime. |
| WebView2 | Microsoft runtime, version 153.0.4234.32 in this installer. Draws the Toolbox. Not in 9.20.0. | Bundle it, or rely on the Evergreen runtime already in Windows. |
No-malware, stated carefully
The publisher says the official installation files are digitally signed. In 11.32.0 the installer engine is signed, and the driverless printer binaries for Windows Protected Print are signed. That is the check you can do on the file: Properties, Digital Signatures.
It is also true that scanners have flagged PDF24 files. Surfshark quarantined a temp file. A report about 11.20.1 named Drop.Win32.RegStartupWin. Sophos has flagged update.exe as malicious behavior. The publisher asked for the detection name and the full path, and pointed people at the current build rather than 11.20.1. This site will not tell you to ignore every alert. A missing signature, or a version you did not mean to download, is a reason to stop.
There is no SHA-256 printed here for 11.32.0, because this page should not invent one. A hash for the older 11.29.1 MSI is a hash of that older MSI only.
The background service is part of the classic printer. People notice PDF24 starting with Windows and compare that with malware. The service is why printing works after a reboot, and it is why error 1920 exists when the service cannot start. You can read the error 1920 steps and the FAQ on startup.
What you are responsible for
You choose the files you open, merge, sign, and compress. You confirm the digital signature of the installer you run. You pick the build that matches the PC: 11.32.0 or 9.20.0, EXE or MSI, x64 or x86 or ARM64, driverless or Legacy.
You decide what a scanner detection means after you have the detection name, the path, and the signature result. Reading this page is not that check.
You keep Windows able to start services if you want the classic printer. You do not send another person's invoice or contract to a tool you do not control when the point of this program is local processing.