Download

One installer per platform.

The desktop builds include the background service that owns the tunnel, so there is nothing else to install. 3 builds available; phones are planned.

These installers are not signed yet

Windows SmartScreen will warn about them, and macOS will need Gatekeeper overridden. Compare the checksum published with each release against the file you downloaded before running it. Code signing is on the list; until it lands, the checksum is the check.

WindowsWindows 10 and later, 64-bit0.1.0 · 96 MB · .exe

The installer is not code-signed yet, so SmartScreen will warn. Check the checksum before running it.

Download

macOSmacOS 12 and later, Apple silicon and Intel0.1.0 · 104 MB · .dmg

Connecting needs a privileged helper, which is not wired up yet — the app installs and signs in.

Download

Linuxx86-64, glibc 2.35 and later0.1.0 · 88 MB · AppImage

Beta

The daemon runs here, but it gets less testing than Windows and macOS.

Download

iOS and iPadOSiOS 16 and later

Planned

Not available yet.

AndroidAndroid 10 and later

Planned

Not available yet.

What the installer does

Registers a background service.
It creates the virtual network adapter and changes the routing table when you connect. It is the only privileged part, and it does nothing else.
Installs the app window.
Unprivileged. It talks to the service over a local socket and cannot touch the network itself.
Bundles the network driver.
On Windows, the driver is pinned by hash and signature at build time and shipped inside the installer. Nothing is fetched at install.
Does not start anything else.
No updater, no telemetry agent, no browser extension. Updates are manual for now, which is a gap — and also a guarantee that nothing is pushed to you.

Before you install

Why does the desktop installer need administrator rights?

The tunnel needs a virtual network adapter and a change to the routing table, and only a privileged process can create either. The installer registers a small background service that does exactly that and nothing else — the window you interact with runs unprivileged and cannot touch the network stack itself.

Is Linux supported?

The background service runs on Linux and the AppImage bundles it with the same interface as the other desktop builds. It gets less testing than Windows and macOS, which is what the beta label means.

When will there be a phone app?

They are planned but not written. The desktop apps share a core with a window around it; a phone cannot use that shape, because iOS and Android each require the tunnel to run inside their own VPN extension. That is a separate build rather than a port, which is why they are listed as planned rather than coming soon.

Can I connect without installing anything?

No. Connecting means creating a network interface on your device, which a web page cannot do. Manual configuration for routers and other devices is not offered yet.

If I close the window, does the tunnel stop?

No. The window is a remote control; the background service owns the tunnel. Closing the window leaves it running, and the quit item says so: “Quit (tunnel keeps running)”. Disconnect from the dial, or sign out.

Have the app? You need an account.

The app signs you in through your browser; create the account first.

Create an account Sign in