// 01_download

VaultPony for Desktop.

Open, unlock and browse your VeraCrypt-format containers on the machine where they already live. VaultPony on the desktop runs the same Rust core as the Android app, so a container opens the same on your phone, on your computer, and in VeraCrypt itself. Linux ships for x86_64 and ARM64, as a .deb, a portable tarball or an AppImage. No accounts, no telemetry, no network code at all.

version 1.0.0 released 2026-08-26 runtime bundled licence Apache-2.0
macOS · sha256
89d08da695fb76090181a23c024613a458b2f46b39adc31fe72f10a85ddfb5d3
Linux · sha256
446de4ffc73fef6ff28c1b9609930ed753c8ec5bba3fd1f0e9199cec69f4b415
Windows · sha256
ff6734c41aea8658d55f861221a3e03a3ddeddfe87611079481a0a6170c6c7b4
More Linux builds
PackageArchsha256
Debian / Ubuntu (.deb) ARM64 12f5ef9706936a5eadd8ebc7a8f4b7342b626a1180adcf10d3cf03d3f34c915f
Portable tarball (.tar.gz) x86_64 0bdbb26cf9c19005dcbfbfef13d1737ab7e66dfee916bb76df84c427c5e2b420
Portable tarball (.tar.gz) ARM64 b801dcedcc29bc0dddd00c54ab8b9423fd13085ae3d5b5f5ec61555c3eada4ab
AppImage x86_64 b0b7762e490abcdcba993bb3073831cc47c0458cb5049fbea6f272cd0f9502df
AppImage ARM64 6b707d82c7de4508d36e75aa05a64a9992f72c5847d1a08030a2122618085ac9

The tarball and AppImage are self-contained and need no install step — extract and run bin/VaultPony, or make the AppImage executable and run it. The .deb installs a desktop entry; the portable builds do not.

What's new in 1.0.0.
First desktop release of VaultPony. Open, unlock and browse your VeraCrypt-format containers on macOS, Linux and Windows — the same Rust core (VaultPonyCore) that powers the Android app, so a container opens the same on your phone, on the desktop, and in VeraCrypt. No accounts, no telemetry, no network code at all.
// 02_same_core

The same core your phone runs.

The desktop app is built on VaultPonyCore, the exact Rust core that powers VaultPony on Android — the VeraCrypt container format, the cipher cascades, the key derivation. One implementation to audit, not two, and the same containers open across every device.

  • VeraCrypt-format containers. Open and unlock the encrypted container files you already have, implemented clean-room from published documentation and tested against real VeraCrypt fixtures.
  • Cross-device by design. A vault made on your phone opens on the desktop and in VeraCrypt; a container you already keep on your computer opens in VaultPony.
  • Password and keyfile unlock. The whole container is one encrypted file, and only your credentials open it.
  • Browse the contents. Work with the files inside a mounted volume from the app's own file view.
  • No network permission at all. There is no network code in the app — nothing to phone home, no telemetry, no accounts.
  • Open source. The desktop app and the shared core are Apache-2.0, public and readable.
Not affiliated with IDRIX. VeraCrypt is a registered trademark of IDRIX. VaultPony is an independent, clean-room project and is not affiliated with or endorsed by IDRIX.
// 03_verify

Check what you downloaded.

Every artifact ships with a detached PGP signature, and each release carries a signed SHA256SUMS covering all of them, signed with the NorseHorse release key (A0CB C8F6 5AAC E56F 1C5B  7677 53F9 798E 4919 DE62).

gpg --verify VaultPony-macOS.dmg.asc VaultPony-macOS.dmg
gpg --verify SHA256SUMS.asc SHA256SUMS
sha256sum -c SHA256SUMS
Where the signatures live. The .asc files and SHA256SUMS are attached to the release alongside the installers, so you can verify before you ever run the thing.
// 04_requirements

What it needs, and what your OS will say.

  • macOS. macOS 11 or later, universal (Intel & Apple silicon)
  • Linux. Debian or Ubuntu, x86-64 (glibc 2.35+)
  • Windows. Windows 10 or later, x64
  • No runtime to install. The app is a single native binary per platform; there is nothing else to set up.
macOS opens it cleanly. The app is signed with a Developer ID certificate and notarized by Apple, with the ticket stapled to the disk image — so it opens without a warning, and without needing a network connection to check.
Windows will warn on first run. The installer is not yet code-signed, so SmartScreen shows an "unrecognized app" prompt — choose More info, then Run anyway. If you would rather not take that on trust, verify the PGP signature and checksum above first.
// 05_source

Read it yourself.

The desktop source is published at github.com/norsehorse-dev/VaultPonyDesktop under Apache-2.0, alongside the Android app and the shared VaultPonyCore. The container engine is vendored from the core rather than reimplemented, so there is one implementation to audit, not two.