diff --git a/package/libvpx/libvpx.hash b/package/libvpx/libvpx.hash
new file mode 100644
index 0000000000..44cd994e10
--- /dev/null
+++ b/package/libvpx/libvpx.hash
@@ -0,0 +1,2 @@
+# Locally computed:
+sha256  f582d9b2d60a592a4a3d8c32965ca2d2167e9ade38c6c30bac8801ff66a118e4  libvpx-1.4.0.tar.bz2
diff --git a/package/libvpx/libvpx.mk b/package/libvpx/libvpx.mk
index 76248352bd..066b037fb8 100644
--- a/package/libvpx/libvpx.mk
+++ b/package/libvpx/libvpx.mk
@@ -4,13 +4,11 @@
 #
 ################################################################################
 
-LIBVPX_VERSION = v1.3.0
-LIBVPX_SITE = http://git.chromium.org/webm/libvpx.git
-LIBVPX_SITE_METHOD = git
-
+LIBVPX_VERSION = 1.4.0
+LIBVPX_SOURCE = libvpx-$(LIBVPX_VERSION).tar.bz2
+LIBVPX_SITE = http://storage.googleapis.com/downloads.webmproject.org/releases/webm
 LIBVPX_LICENSE = BSD-3c
 LIBVPX_LICENSE_FILES = LICENSE PATENTS
-
 LIBVPX_INSTALL_STAGING = YES
 
 # ld is being used with cc options. therefore, pretend ld is cc.