PassPony for Desktop.
Your pass and passage store on macOS, Linux and Windows. Browse, search, edit and generate entries, read your TOTP codes, and sync over your own git remote — the same core, the same keys, the same stores as the phone apps. Linux ships for x86_64 and ARM64, as a .deb, a portable tarball or an AppImage. No accounts, no tracking, keys stay on your device.
3c63f5090dc3a91ef9bce56e86ec2a42f2a06ccff1724ed896a3998d10d97764
9e18563c7ba5a57cee6e0e58f09356fe2e9adf2e1ddad45f9fe21bb7bdf49cf1
81163e57a2dd4594e8baacd6cd99828ab9fbd05b089de7fa5f2bf8811d37f0d1
| Package | Arch | sha256 |
|---|---|---|
| Debian / Ubuntu (.deb) | ARM64 | 7d79a20c6f1b9e7e7849e37e0478fdca6b33bc17b9a1d1d29c629918f1ef88e4 |
| Portable tarball (.tar.gz) | x86_64 | b3d254b39a4bdb249afb3236abe41f72e13eedbf9d3434a1c70335088a86a861 |
| Portable tarball (.tar.gz) | ARM64 | 1aa6e70822b909bedca909425a48c9e90f7dafcfa7fe048908d36914da708c36 |
| AppImage | x86_64 | c8c715bc00cdb9a54529a9686491b5993d9db689f8e75ff04402f0b3bbb8f56a |
| AppImage | ARM64 | a87b31bab2caec654165223e38af75cd8478a2068f916afedd4ff855996c045a |
The tarball and AppImage are self-contained and need no install step — extract and run
bin/PassPony, or make the AppImage executable and run it. The .deb
installs a desktop entry; the portable builds do not.
First desktop release of PassPony. The same pass and passage store, the same keys, and the same git remotes as the phone apps, now on macOS, Linux and Windows — built on PassPonyCore, the exact Rust core the phones ship. No accounts, no ads, no analytics.
The same core your phone runs.
The store model, entry codec, git sync engine and TOTP come from PassPonyCore — the exact Rust core the phones ship — consumed directly, Rust to Rust, with no reimplementation. Both password stores, both crypto backends, one codebase to audit.
- pass and passage. Classic
passover OpenPGP andpassageover age, both fully interoperable with the realpass,gpg,passageandagecommand-line tools. - Browse and edit. Open a store, search, and read entries in a master–detail list — with reveal/hide, a 45-second auto-clearing clipboard, key:value fields, and a live TOTP code with a countdown ring.
- Add, edit, generate. A built-in password generator, each change committed with pass-CLI-compatible messages.
- Your keys. Import an OpenPGP key, unlock a locked key, and generate or back up an age identity — keys never leave the device.
- Git sync you own. Clone, publish, fetch, push and sync over your own remote — GitHub, GitLab, Codeberg or self-hosted — with per-file conflict resolution, never a silent merge.
- Seven languages. English, Español, Français, Deutsch, 简体中文, Português (BR) and Русский, switchable live.
- A command line. The same binary is the GUI and the verbs —
passpony show,generate,list— sharing the app's keyring.
Check what you downloaded.
Every artifact ships with a detached PGP signature, and each release carries a signed
SHA256SUMS covering all of them, signed with the NorseHorse release key
(A0CB C8F6 5AAC E56F 1C5B 7677 53F9 798E 4919 DE62), published on
this site and over WKD.
gpg --verify PassPony-macOS.dmg.asc PassPony-macOS.dmg gpg --verify SHA256SUMS.asc SHA256SUMS sha256sum -c SHA256SUMS
.asc files and SHA256SUMS are attached to
the release
alongside the installers, so you can verify before you ever run the thing.What it needs, and what your OS will say.
- macOS. macOS 11 or later, universal (Intel & Apple silicon)
- Linux. Debian or Ubuntu, x86-64 (glibc 2.35+)
- Windows. Windows 10 or later, x64
- No runtime to install. The app is a single native binary per platform; there is nothing else to set up.
Read it yourself.
The desktop source is published at github.com/norsehorse-dev/PassPonyDesktop under Apache-2.0, alongside the iOS and Android apps and the shared PassPonyCore. The core is vendored verbatim rather than reimplemented, so there is one implementation to audit, not two.