VaultPony for Desktop

Open, unlock and browse your VeraCrypt-format containers on the machine where they already live. VaultPony on the desktop runs the same Rust core as the Android app, so a container opens the same on your phone, on your computer, and in VeraCrypt itself. Linux ships for x86_64 and ARM64, as a .deb, a portable tarball or an AppImage. No accounts, no telemetry, no network code at all.

Version 1.0.0 Released 2026-08-26 Runtime bundled License Apache-2.0
macOS · sha256
89d08da695fb76090181a23c024613a458b2f46b39adc31fe72f10a85ddfb5d3
Linux · sha256
446de4ffc73fef6ff28c1b9609930ed753c8ec5bba3fd1f0e9199cec69f4b415
Windows · sha256
ff6734c41aea8658d55f861221a3e03a3ddeddfe87611079481a0a6170c6c7b4
More Linux builds
PackageArchsha256
Debian / Ubuntu (.deb) ARM64 12f5ef9706936a5eadd8ebc7a8f4b7342b626a1180adcf10d3cf03d3f34c915f
Portable tarball (.tar.gz) x86_64 0bdbb26cf9c19005dcbfbfef13d1737ab7e66dfee916bb76df84c427c5e2b420
Portable tarball (.tar.gz) ARM64 b801dcedcc29bc0dddd00c54ab8b9423fd13085ae3d5b5f5ec61555c3eada4ab
AppImage x86_64 b0b7762e490abcdcba993bb3073831cc47c0458cb5049fbea6f272cd0f9502df
AppImage ARM64 6b707d82c7de4508d36e75aa05a64a9992f72c5847d1a08030a2122618085ac9

The tarball and AppImage are self-contained and need no install step. Extract and run bin/VaultPony, or make the AppImage executable and run it. The .deb installs a desktop entry; the portable builds do not.

What's new in 1.0.0.
First desktop release of VaultPony. Open, unlock and browse your VeraCrypt-format containers on macOS, Linux and Windows, using the same Rust core (VaultPonyCore) that powers the Android app, so a container opens the same on your phone, on the desktop, and in VeraCrypt. No accounts, no telemetry, no network code at all.

The same core your phone runs

The desktop app is built on VaultPonyCore, the exact Rust core that powers VaultPony on Android: the VeraCrypt container format, the cipher cascades, the key derivation. One implementation to audit, not two, and the same containers open across every device.

  • VeraCrypt-format containers. Open and unlock the encrypted container files you already have, implemented clean-room from published documentation and tested against real VeraCrypt fixtures.
  • Cross-device by design. A vault made on your phone opens on the desktop and in VeraCrypt; a container you already keep on your computer opens in VaultPony.
  • Password and keyfile unlock. The whole container is one encrypted file, and only your credentials open it.
  • Browse the contents. Work with the files inside a mounted volume from the app's own file view.
  • No network permission at all. There is no network code in the app: nothing to phone home, no telemetry, no accounts.
  • Open source. The desktop app and the shared core are Apache-2.0, public and readable.
Not affiliated with IDRIX. VeraCrypt is a registered trademark of IDRIX. VaultPony is an independent, clean-room project and is not affiliated with or endorsed by IDRIX.

Check what you downloaded

Every artifact ships with a detached PGP signature, and each release carries a signed SHA256SUMS covering all of them, signed with the NorseHorse release key (A0CB C8F6 5AAC E56F 1C5B  7677 53F9 798E 4919 DE62).

gpg --verify VaultPony-macOS.dmg.asc VaultPony-macOS.dmg
gpg --verify SHA256SUMS.asc SHA256SUMS
sha256sum -c SHA256SUMS
Where the signatures live. The .asc files and SHA256SUMS are attached to the release alongside the installers, so you can verify before you ever run the thing.

What it needs, and what your OS will say

  • macOS. macOS 11 or later, universal (Intel & Apple silicon)
  • Linux. Debian or Ubuntu, x86-64 (glibc 2.35+)
  • Windows. Windows 10 or later, x64
  • No runtime to install. The app is a single native binary per platform; there is nothing else to set up.
macOS opens it cleanly. The app is signed with a Developer ID certificate and notarized by Apple, with the ticket stapled to the disk image, so it opens without a warning, and without needing a network connection to check.
Windows will warn on first run. The installer is not yet code-signed, so SmartScreen shows an "unrecognized app" prompt. Choose More info, then Run anyway. If you would rather not take that on trust, verify the PGP signature and checksum above first.

Read it yourself

The desktop source is published at github.com/norsehorse-dev/VaultPonyDesktop under Apache-2.0, alongside the Android app and the shared VaultPonyCore. The container engine is vendored from the core rather than reimplemented, so there is one implementation to audit, not two.