Get VaultTerm
Web app, Relay, macOS and Linux are available from this site today. Every other client is still in development — each one appears here with a real download once it clears store review and signing, and not before.
Relay
API client that borrows credentials from your vault instead of storing them, so a token never lands in a client config file. Version 1.1.0 for macOS.
- Signing:
- Unsigned. macOS refuses it on first launch until you clear the quarantine flag.
- Runs on:
- Apple silicon (arm64) only. It will not run on an Intel Mac.
- Updates:
- No updater at all. An installed copy never checks for a new version and cannot be corrected remotely — come back here to upgrade.
Opening an unsigned build
This beta is not signed with an Apple Developer ID, so macOS stops it the first time you open it. That is normal for a beta build and takes one extra step.
- Drag VaultTerm Relay to your Applications folder.
- Clear the download quarantine with the command below, then open VaultTerm Relay normally.
- If you would rather not use Terminal: open System Settings, go to Privacy and Security, choose Open Anyway, and confirm.
xattr -d -r com.apple.quarantine "/Applications/VaultTerm Relay.app"Control-clicking the app and choosing Open will not work. Apple removed that bypass in macOS 15.
Browser extension
Chrome and Firefox autofill and capture. Not in either store yet, and the self-hosted Firefox update feed is not published either.
macOS
Native desktop app, version 1.1.0, for Apple silicon and Intel Macs.
- Signing:
- Unsigned. macOS refuses it on first launch until you clear the quarantine flag.
- Runs on:
- Separate Apple silicon (arm64) and Intel (x64) builds — take the one that matches your Mac.
- Updates:
- No auto-update: macOS will not apply an update to an unsigned app, so an installed copy stays on this version until you come back here.
Opening an unsigned build
This beta is not signed with an Apple Developer ID, so macOS stops it the first time you open it. That is normal for a beta build and takes one extra step.
- Drag VaultTerm to your Applications folder.
- Clear the download quarantine with the command below, then open VaultTerm normally.
- If you would rather not use Terminal: open System Settings, go to Privacy and Security, choose Open Anyway, and confirm.
xattr -d -r com.apple.quarantine "/Applications/VaultTerm.app"Control-clicking the app and choosing Open will not work. Apple removed that bypass in macOS 15.
Windows
Native desktop app. The Windows installer is not built or published yet — there is no latest.yml on the update feed for it.
Linux
Native desktop app, version 1.1.0, as an AppImage or a .deb package.
- Signing:
- Unsigned, and the .deb is not served from an apt repository — apt will not verify or upgrade it.
- Runs on:
- x86_64 (amd64) only. There is no 32-bit or ARM Linux build.
- Updates:
- The AppImage updates itself from this site's feed when it is run as an AppImage. The .deb does not update at all — reinstall from this page.
Opening an unsigned build
Both Linux builds are unsigned, and the .deb is a standalone file rather than an apt repository. Nothing will block you from installing, but apt cannot verify or upgrade it for you.
- AppImage: make it executable with the command below, then run it. Without the executable bit a double-click does nothing and reports no error.
- Debian or Ubuntu: install the .deb with `sudo apt install ./VaultTerm-1.1.0-amd64.deb` — apt resolves its dependencies, `dpkg -i` alone does not.
chmod +x VaultTerm-1.1.0-x86_64.AppImageCLI
Scriptable access from the shell: `vt`, installed with npm. The package is built but is not published to any registry a stranger can install from yet.
MCP for AI assistants
Not a separate download. Your AI assistant connects to VaultTerm's hosted MCP endpoint, and the local bridge that brokers it ships inside the CLI as `vt mcp` — so it arrives with the CLI. Needs a plan that includes agent access.
Want to see what's shipped lately? Read the changelog.