Installation
Install QubKey desktop on macOS, Windows, and Linux — required for extension and sync.
QubKey is a native desktop application that forms the core of the ecosystem. Download the installer for your operating system and follow the steps below.
The QubKey ecosystem includes the desktop app (required — vault, cryptography, management) and the browser extension (optional — auto-fill via Native Messaging). Optional sync across your own devices can complement the local-first model (cloud folder, manual copy of the .rkvey file). The desktop app must be installed first — the extension depends on it.
Installation order
QubKey desktop app
Install the native app first: it manages the .rkvey vault, all cryptography (Argon2id, AEAD), and secret management. Without it, the extension does not work.
Browser extension (optional)
Once the desktop app is installed and a vault created, download the Chrome or Firefox extension from the browser extensions page (macOS or Windows package matching your OS), configure Native Messaging, then connect the extension.
Optional sync (optional)
Built-in multi-device sync (QubKey cloud — self-hosting coming soon as a download, enabled in Settings) or manual copy/sync of the encrypted .rkvey file (cloud folder, USB drive).
System requirements
Operating system
macOS (Apple Silicon) and Windows 10/11 (NSIS/MSI) available for download. Linux in active development — see release notes and the site Download page.
RAM
4 GB minimum — 8 GB recommended. Argon2id uses 64 MB per unlock; insufficient RAM may slow vault opening.
Disk space
200 MB for the application
WebView
WebView2 (Windows) or WebKit — bundled on macOS/Linux via Tauri
Download
macOS
Apple Silicon (arm64) .dmg — outside the Mac App Store. Verify the SHA-256 hash on the download page.
Windows
NSIS/MSI installers for Windows 10/11 (x64 or x86) — see the dedicated page for available packages.
Linux
In active development — no Linux download published yet.
Platform installation
Download the Apple Silicon (arm64) .dmg from the macOS page
Verify the published SHA-256 fingerprint, open the .dmg, and drag QubKey to /Applications
On first launch: right-click → Open if Gatekeeper shows a warning (app outside the Mac App Store)
Grant disk and Documents folder access if macOS prompts
Check the Windows page for available NSIS/MSI installers (x64 or x86)
Double-click the installer and follow the wizard (choose install folder)
Accept WebView2 installation if prompted (required for Tauri UI)
Launch QubKey from the Start menu — allow file access if Windows prompts
Linux
The Linux version is in active development. No AppImage, .deb, or .rpm package is offered on the site yet — follow the Download page for announcements.
Integrity verification
Binary integrity
Always verify the signature or SHA256 hash before installing — this ensures the binary was not tampered with between the build and your machine (supply chain).
shasum -a 256 QubKey_2.0.0_aarch64.dmgCompare with the hash on the download page or in Release notes (per-build table).
Post-installation
First vault
Create your .rkvey vault and set the master password
Browser extension
Install the extension for auto-fill
Sync
Export or sync your .rkvey file (optional)
Troubleshooting
Missing WebView2 (Windows)
Tauri requires WebView2 to display the UI. Download it from microsoft.com/edge/webview2 if the installer did not offer it.
Gatekeeper blocks (macOS)
For non-notarized builds: right-click → Open. Alternatively: xattr -cr /Applications/QubKey.app to remove quarantine.
Missing dependencies (Linux)
Tauri requires webkit2gtk. Debian/Ubuntu: sudo apt install libwebkit2gtk-4.1-0 libayatana-appindicator3-1