Download Tunnel Desktop
End-to-end encrypted messaging for macOS, Windows, and Linux.
Choose Your Platform
All downloads include automatic updates. Your app will stay current automatically.
macOS
Apple Silicon
M1, M2, M3, M4 chips
macOS
Intel
Intel-based Macs
Windows
x64
Windows 10/11 64-bit
Linux
AppImage
Universal Linux package
Linux
Debian/Ubuntu
.deb package
Auto-Update Enabled
Tunnel Desktop automatically checks for updates and installs them in the background. You will be notified when a new version is ready to install. Updates are downloaded over HTTPS from GitHub Releases.
Installation Guide
macOS
- 1Download the .dmg file for your Mac (Apple Silicon or Intel)
- 2Open the downloaded .dmg file
- 3Drag Tunnel to the Applications folder
- 4First launch: Right-click and select "Open" to bypass Gatekeeper
- 5Click "Open" in the security dialog
Tunnel is notarized by Apple and will work after the first launch approval.
Windows
- 1Download the .exe installer
- 2Run the installer (you may see a SmartScreen warning)
- 3Click "More info" then "Run anyway" if prompted
- 4Follow the installation wizard
- 5Launch Tunnel from the Start menu or desktop shortcut
Windows builds are currently unsigned. SmartScreen warnings are expected.
Linux
- 1AppImage: Download, make executable (chmod +x), and run
- 2Debian/Ubuntu: Download .deb and install with dpkg -i or double-click
- 3The app will be available in your applications menu
AppImage requires FUSE. On Ubuntu 22.04+, install libfuse2 first.
Trust & Verification
Verify your download integrity and code signatures for maximum security.
Verify Download Integrity (SHA256)
Compare the SHA256 checksum of your download against the official checksums.
Download SHA256SUMS.txtmacOS / Linux:
shasum -a 256 Tunnel-1.0.1-*.dmgWindows (PowerShell):
Get-FileHash Tunnel-1.0.1-win-x64.exe -Algorithm SHA256macOS Notarization Verification
Verify that the app is notarized by Apple and passes Gatekeeper checks.
Check code signature:
codesign --verify --deep --strict --verbose=2 /Applications/Tunnel.appCheck Gatekeeper assessment:
spctl --assess --type execute --verbose /Applications/Tunnel.appCheck notarization status:
spctl --assess --verbose=4 --type execute /Applications/Tunnel.appWindows Authenticode Verification
Verify the digital signature of the Windows installer.
PowerShell:
Get-AuthenticodeSignature .\Tunnel-1.0.1-win-x64.exe | Format-ListOr right-click the .exe → Properties → Digital Signatures tab
Note: Windows builds are currently unsigned. Code signing will be added in a future release.