An input method sees every key you press
That is what an input method is, so you are entitled to proof rather than promises. This page states exactly what Dấu Việt does with your keystrokes, and how you can check it yourself.
The release is downloaded as DauViet.zip. The
DauViet.exe 0.9.0 inside it — the very file that was scanned on
VirusTotal — has this SHA-256 hash:
13908d5417742610f1b8c63c31ca8d69b8f883590ad40f17dd80a18d5db7a9fb
Open the scan report below to see the verdict of more than 70 antivirus engines.
Extract the archive and compare the hash of DauViet.exe; if it
differs from this one, do not run it — it is not the build we
published. (The outer .zip is only a container; its hash changes every time the
archive is created, so we do not publish one.)
Verify it yourself in 30 seconds
Nothing to install — PowerShell ships with Windows.
-
Extract
DauViet.zipThe published hash belongs to the
DauViet.exeinside, so extract it first. -
Open PowerShell in the folder with the EXE
Right-click an empty spot in the folder → “Open in Terminal”.
-
Run the hash command
Get-FileHash .\DauViet.exe -Algorithm SHA256 -
Compare it with the hash above
The two strings must be identical (case does not matter). You can also upload the file to VirusTotal and scan it again at any time.
Privacy enforced in the architecture
Not a checkbox in the interface, but the way the software is written.
No route to the Internet
There is not one line of network code in the whole source: no sockets, no HTTP, no WinINet, no silent updater, no server to send anything to. Dấu Việt also has no mandatory cloud or AI API.
No keystroke logging
The word in progress lives in memory only and is cleared at every word boundary. The logger has no function that accepts user text — it can only write a fixed message plus a number.
A single gate
Every key passes one privacy check. If the result is anything but “allowed”, the key is handed back to Windows untouched and the composition is dropped.
Guards nothing overrides
Even with “type in all applications” on: excluded applications, recognisable Win32 password fields and windows owned by a higher-integrity process are always skipped.
Clipboard only on command
The clipboard is never polled. Only when you run a text command does Dấu Việt
borrow it and then restore it. The {clipboard} snippet variable is
off by default.
No administrator rights
It runs as a standard user. No UIAccess, no system service, no keyboard driver, no technique that crosses a Windows privilege boundary.
Why Windows or an antivirus may still warn you
The release is not signed with a code signing certificate yet, so Windows SmartScreen may show its blue “Windows protected your PC” screen for a freshly downloaded file. Click More info → Run anyway once you have verified the hash.
Some antivirus tools flag any program that uses a low level keyboard hook as “keylogger-like behaviour”, because that is precisely the mechanism every Vietnamese input method (UniKey, EVKey, GoTiengViet…) relies on. The difference is where the data goes — and with Dấu Việt it goes nowhere: no network, no key log file.
The VirusTotal report for the hash above currently shows no detections. Scan results can change over time as vendors update their signatures; the link always opens the current report, not a saved screenshot.
Where your data lives
| File | Contents | Anything sensitive? |
|---|---|---|
settings.json | Options, hotkeys, per-application rules | No |
dictionary.json | Words you added yourself | Whatever you typed in |
snippets.json | The snippets you created | Whatever you typed in |
profiles.json | Configuration profiles | No |
diagnostics.log | Technical log, off by default | Never contains what you typed |
They all live in %LOCALAPPDATA%\DauViet\ (or a data
folder next to the EXE in portable mode) and are plain JSON you can read in
Notepad — so you can confirm the software stores exactly what it says. Delete the
folder and nothing is left. See also the full
privacy policy.
Checked it? Then grab it
Free, no ads, no account, nothing collected.