QuorumPony for desktop.
The same card-based backup, on your computer. Split a secret, print the cards, and rebuild it from any few. Fully offline, signed, and open source, on macOS, Windows, and Linux.
macOS is a signed, notarized build for Apple silicon. Windows is a standard 64-bit .msi. Please verify your download before you trust it.
All downloads
macOS
sha256 5d22f8bf22761808632a21c2123b0faf4c09be3c6e5632141ba8f70b6ddfee73
Windows
sha256 b1bef0660b41a4158e1fd29e1eb2c6dca0b24fd9087ab69bbcec4339a328cdbc
Linux (x86_64)
sha256 291e76bb4b03d77d4581afc5708b5d9f89de9a98f37a43babf04bcd22042a0fc
sha256 5807f40f019fca6bacfa5dca81d9f74294239cd4654b96e7b9a3742072a1ec03
sha256 550125b772c194bd4a2db36fb86c03f0e2b53d951be7ded651f6e7b18c849a8a
Linux (ARM64)
sha256 9a215200da985ca062736bb94d76a63947718236e3a4d058af717627a5e7795d
sha256 a2aa4bf9f38391cbe8dfffaac4be59234f3c6b3e5c739cf6d2881d93223e3945
sha256 682a32d3aed1208d7258839fd1a2c10daaf3bfef6a57c87cd930598c7a0f0d6e
Arch Linux: install quorumpony-bin from the AUR. Not sure which Linux file you need? The .deb is for Debian, Ubuntu, and their derivatives; the AppImage runs on most distributions without installing; the tarball is a portable unpack-and-run. Pick ARM64 for a Raspberry Pi or an ARM server, x86_64 for an ordinary PC.
Verify your download
Every file is signed with the QuorumPony release key, and a single SHA256SUMS covers them all and is itself signed. You do not have to trust this page, or the network you fetched over. Import the key once, then check the manifest and the file:
SHA256SUMS · SHA256SUMS.asc · release key · about the key
A good check prints Good signature from "NorseHorse" for the manifest and OK for the file. On macOS the app is also notarized by Apple, so it opens without a Gatekeeper warning; on first launch of the Windows build you may see a SmartScreen prompt until the installer builds reputation.
Private by default
QuorumPony makes no network requests. There is no account, no telemetry, and nothing leaves your machine. The one exception is an update check, and it is off by default. If you turn it on in Settings, it fetches a single static file from this site to compare version numbers, and nothing else, not even the version you are running. The whole app works in airplane mode.
Open source
The desktop app is built on the same cryptographic core as the mobile app, open source under Apache-2.0. The desktop build itself lives at norsehorse-dev/QuorumPonyDesktop, where every release is built in public CI and the checksums above come straight from it.