Install and update

MorphGate runs on Linux, macOS and Windows. Get the files from the download page.

Packages

Linux (x86_64 and arm64)
.AppImage for any distribution, .deb for Debian and Ubuntu, .rpm for Fedora and openSUSE. The .deb and .rpm include the polkit action used to unlock with your fingerprint or login password.
macOS (Apple silicon and Intel)
One universal .dmg.
Windows
An installer (-setup.exe) or an .msi package for managed installs.

Installing

Linux AppImage

Make the file executable and run it:

chmod +x MorphGate_*.AppImage
./MorphGate_*.AppImage

macOS

The builds are not code-signed yet. The first time, right-click MorphGate in Applications and choose Open.

Windows

The builds are not code-signed yet. If Windows stops the installer, choose More info, then Run anyway.

Optional: openconnect

WireGuard and OpenVPN are built into MorphGate. VPNs for Cisco AnyConnect, GlobalProtect, Fortinet and similar servers use the separate openconnect program. Install it if you need one:

  • Fedora: sudo dnf install openconnect
  • Debian and Ubuntu: sudo apt install openconnect
  • macOS: brew install openconnect

openconnect VPNs aren't available on Windows yet. See A VPN per host.

Updates

MorphGate updates itself. It checks for a new release at launch and twice a day, and installs only updates signed with the project's key. Nothing from your vault is sent when it checks.

  • When an update is ready, the sidebar shows Update to and the version. Open About (the logo at the top of the sidebar) and choose Install and restart.
  • Open terminals, file browsers, tunnels and VPNs close when MorphGate restarts. Your vault stays as it is.
  • Installing a .deb or .rpm update asks for an administrator password.
  • To stop automatic checks, untick Check for updates automatically under About. Check now still works.

A build you made from source can't update itself. Install a release package to get updates.

Where your data lives

MorphGate keeps its data in one folder:

  • Linux: ~/.local/share/com.morphgate.desktop/
  • macOS: ~/Library/Application Support/com.morphgate.desktop/
  • Windows: %APPDATA%\com.morphgate.desktop\
vault.sqlite3
Your encrypted vault. It holds ciphertext only. Opening it needs your master password or recovery key.
known_hosts
Host keys you accepted. MorphGate also reads ~/.ssh/known_hosts, but never changes it. A changed key in either file blocks the connection.

Deleting vault.sqlite3 resets MorphGate to first-run setup and destroys the hosts and keys saved on this device. Copies on your other synced devices, and on the sync server, are not affected.

Building from source

The source code is at github.com/valicm/MorphGate. You need Rust 1.91 or newer, Node 22 and the Tauri system libraries (on Fedora: webkit2gtk4.1-devel, libsoup3-devel and openssl-devel). The repository's README has the build commands.