Abstract file-rank board fragment with one umber file column and one sand rank row on ash paper.
File-rank mark: one olive file and one sand rank meet on a selected square for a local chess client install. Rank Timber original file-rank geometry for factory-chess (not a PyChess logo).

Safety here means a named file from pychess/pychess Releases, not a portal that ranks for the head term. Prefer pychess-*-mingw_x86_64_msvcrt_gnu.msi or python3-pychess_*.deb. No winget id was found.

What GPL-3.0 gives you

You can read the client source. You can rebuild it. You still have to trust the MSI or .deb you actually run. Stars on GitHub are a popularity signal, not a certificate.

What this client stores

Games and analysis live as PGN, EPD, or FEN on disk you control. That is different from a website account. Export and backup those files yourself. Details: PGN and engines.

What this client is not

PyChess is not a commercial website. It is not an antivirus. It will not stop you from installing a second adware copy if you ignore the filename. Safe door: download safe.

Signing and SmartScreen

Windows may show SmartScreen on a first MSI run. Prefer the Releases URL you typed. This guide does not invent a signing story we did not verify on a real machine.

GitHub: GitHub. First hour: installed. Home: home.

Rank Timber publishes the install guide. Upstream security reports belong on pychess/pychess security. Program bugs belong on GitHub Issues.

Club machines should pin the filename. After a reimage, prove one local game before you call the desk ready. That habit catches vanished installers and renamed shortcuts.

If a teammate forwards a “faster chess setup” from chat, ask for the GitHub Releases URL instead. The honest path always returns to pychess/pychess.

Practical checks

Match the filename. Match the GitHub org. Match the tag. If any of those three drift, stop. Portals that wrap the MSI for ranking are the usual failure, not the GTK code itself.

Keep PGN files in a folder you back up. A local client does not magically sync to a website. If you want cloud copies, that is a separate job you design.

Engines you download are separate programs with separate licences. Treat Stockfish or GnuChess as their own install doors. This guide maps PyChess, not every engine on earth.

Servers and club policy

Optional FICS or ICC logins send moves to those servers. That is a different trust boundary from a local game. Prove offline play first.

Rank Timber publishes filenames and habits. Upstream security mail belongs on GitHub. Related: download safe, GitHub, first run.

Club policy should ban “helper” toolbars. After a reimage, prove one game from the named asset before you call the image ready.

Shared-machine rhythm

Write the installer class on the ticket beside the OS version. After every reimage, take that same class from GitHub Releases, launch the GTK window, and replay one saved PGN. That three-step loop catches vanished packages and portal shortcuts that reappear from old bookmarks.

Keep engine binaries on a documented path. Keep the PGN folder off the package tree so uninstalls do not wipe club history. Keep website bookmarks if rated pools still matter, and keep them labelled as a different job.

Rank Timber publishes the install map. Upstream remains at pychess.github.io. Related doors stay under guides, releases, and installed.

Prove the GTK window before you add engines, servers, or a second installer. The proof is the gate.

  • One named GitHub asset
  • One local game
  • One PGN folder on the ticket

Frequently asked questions

Is PyChess open source?

Yes. The GitHub repository reports GPL-3.0. You can read the GTK Python client, build it under those terms, and compare the named Releases assets with the tag you expect. Source being public is a review aid, not a magic shield against a renamed mirror.

Where should I download a safe chess setup?

Prefer GitHub Releases for pychess/pychess when you want named chess assets. Take pychess-*-mingw_x86_64_msvcrt_gnu.msi on Windows or python3-pychess_*.deb on Linux. Keep Softonic-style mirrors out of the loop. Document the update door on the machine ticket so the next bump stays honest for shared desks.

Does a local chess client need an account?

No. PyChess plays and analyzes on your desk without a website account. Optional FICS or ICC logins come later and stay optional. This guide does not start with a commercial signup funnel.