Download

One installer per platform.

The desktop installer includes the background service that owns the tunnel, so there is nothing else to install. Windows today; macOS, iOS and Android are on the way.

WindowsWindows 10 and later, 64-bit.exe installer
macOSmacOS 12 and later, Apple silicon and Intel
Planned
Not available yet.
Linuxx86-64, glibc 2.35 and laterAppImage
Beta

Tested less than Windows, which is what the beta label means.

iOS and iPadOSiOS 16 and later
Planned
Not available yet.
AndroidAndroid 10 and later
Planned
Not available yet.

What the installer does

  • Registers a background service.

    It creates the virtual network adapter and changes the routing table when you connect. It is the only privileged part, and it does nothing else.

  • Installs the app window.

    Unprivileged. It talks to the service over a local socket and cannot touch the network itself.

  • Bundles the network driver.

    On Windows, the driver is pinned by hash and signature at build time and shipped inside the installer. Nothing is fetched at install.

  • Does not start anything else.

    No telemetry agent, no browser extension, no bundled extras. The installer puts the app and its service on the machine and stops there.

Before you install

Why does the desktop installer need administrator rights?
The tunnel needs a virtual network adapter and a change to the routing table, and only a privileged process can create either. The installer registers a small background service that does exactly that and nothing else — the window you interact with runs unprivileged and cannot touch the network stack itself.
Is Linux supported?
Yes. The background service runs on Linux and the AppImage bundles it with the same interface as the Windows build. It gets less testing than Windows, which is what the beta label means.
When will there be a phone app?
The iOS app is in testing now, and Android follows it. Phones require the tunnel to run inside the operating system’s own VPN extension, so each is a separate build around the same core rather than a port of the desktop app — which is why they arrive after it.
Can I connect without installing anything?
No. Connecting means creating a network interface on your device, which a web page cannot do. Manual configuration for routers and other devices is not offered.
If I close the window, does the tunnel stop?
No. The window is a remote control; the background service owns the tunnel. Closing the window leaves it running, and the quit item says so: “Quit (tunnel keeps running)”. Disconnect from the dial, or sign out.

Have the app? You need an account.

The app signs you in through your browser; create the account first.