Android 8.0+
AvailableInstalled from Google Play, which verifies the signature for you. It is the only platform with a full system tunnel.
Downloads, and how to verify them
Every platform with its real status. Nothing marked available that is not.
Linux (x86-64)
Beta — downloadable.deb and AppImage, built by continuous integration with their SHA-256 published. Local proxy mode. The firewall kill switch is not available in the application yet.
Windows 10/11
Beta 0.2.5 — downloadable0.1.0 froze at startup and was withdrawn on 9 September. This build fixes all four causes, and adds that the core always closes with the application —it could previously stay running after a forced close— plus a tray icon so you can see the status without opening the window.
The binary starts and exits correctly in continuous integration, but it has not yet been checked on a real machine. Not code-signed: SmartScreen will show a warning. Local proxy mode, no kill switch.
macOS
No app, but there is a way outThere is no desktop app: shipping one requires an Apple developer ID and notarisation, and we have neither. But the local MCP server DOES run on macOS: it is a Node program that needs no signature, and it brings up the same tunnel for your AI assistant and for any application you point at the local proxy.
Requires installing Xray yourself. We have not tested this on a Mac: the route exists and is documented, but we cannot say it is verified.
Downloads — version 0.1.0 beta
Built by continuous integration, not on anyone's laptop. Each file's hash is produced by the same build that produces the file, and was checked three times: on build, on upload to the server, and by downloading it from this very URL.
| File | Size | SHA-256 |
|---|---|---|
| vpnpro89_0.1.0_amd64.deb | 23,6 MB | 908d1cacea1a80ea0190f12f61ef0712b5b1bca03589e971a4d83b044325a9ba |
| vpnpro89_0.1.0_amd64.AppImage | 92,1 MB | 23fccbbe4214310817433cbc74be943569155a81f1eca85324a1c99a167f30b7 |
| vpnpro89_0.2.5_x64-setup.exe | 14,8 MB | 3b846013bfa8a6d560421ae8197ff53c7c019fcebc5357a4f51b2e60c62ee454 |
| vpnpro89_0.2.5_x64.msi | 22,1 MB | 83c41b01cfecfa04b227fb9088803de924ef5db1da1c53e8e8dfe5cdbcf50d93 |
Linux requires a distribution with GTK 3 and WebKit2GTK 4.1. The firewall kill switch is not available in this build: the mechanism exists but the application does not switch it on yet, so do not count on it as protection. · SHA256SUMS.txt
Windows: what changed since 0.1.0
Version 0.1.0 stopped responding at startup on some machines and was withdrawn on 9 September 2026. Version 0.1.1 fixed the four causes —the interface blocked waiting for the network, the animation could saturate the machine, a process was spawned every second, and the core outlived the application— and added the tray icon. Version 0.2.0 rebuilds the whole window. If you installed 0.1.0 and lost connectivity, open the application once: the system proxy restores itself at startup. You can also turn it off by hand in Settings → Network & Internet → Proxy.
How to check what you downloaded
Desktop binaries are not code-signed during the beta, so the published hash is the only thing that lets you check the file is ours and not a copy altered on the way. Compare the result with the one shown next to the download.
sha256sum vpnpro89_0.1.0_amd64.deb
Windows: certutil -hashfile fichero.exe SHA256 · macOS: shasum -a 256 fichero
Windows will warn you, and it is right to
When you open the installer, SmartScreen shows a blue screen saying it protected your PC. It has not found anything wrong with the file: it does not recognise who signed it, because it is not signed.
The button to continue is not visible at first. It is hidden behind “More info”, and that is the part that confuses everyone:
1 · What you see at first
2 · After clicking “More info”
And here is the point: the hash does the job the signature would do. A code signature says “this was published by who it claims”. The SHA-256 says exactly the same thing, except you check it yourself instead of Windows checking it for you. If the hash matches the one published here, the file is the one we built and nobody has touched it on the way.
If the hash does not match, do not install it and write to us. Whatever SmartScreen says in that case is irrelevant.
Why they are not signed
Code signing costs around 120 dollars a year on Windows and 99 on macOS, and this project runs on voluntary donations. We would rather say so than charge for the app or add ads. When there is enough income, it gets signed.
Where NOT to download it
Only from Google Play and from this domain. Any other site offering VPN PRO 89 has no relationship with us, and a tampered VPN is a particularly bad way to get surveilled.