Download

Requirements

• macOS 14.0 (Sonoma) or later. Earlier versions no longer receive security updates from Apple, and holding a financial vault on an unpatched system is a bad trade.
• Apple silicon and Intel — one universal binary (ADR 0072).
• Roughly 200 MB of disk, plus whatever your own data comes to.

What you will see on first launch

DohFlow is signed with an Apple Developer ID and notarized by Apple. Double-click it and it opens. macOS may show a one-time dialog confirming it was checked for malicious software — that is the normal notarized flow, and you should not see an "unidentified developer" warning or need to open it any special way.

We will never ask you to bypass Gatekeeper. No right-click → Open. No xattr -d com.apple.quarantine. No disabling protections. If any instructions claiming to be from DohFlow ask you to do that, they are not from us. Software that handles your bank data should clear Apple's checks, and if ours ever fails to, the answer is that we fix it — not that you weaken your Mac.

Verify the download

Every release publishes a SHA-256 checksum. To check the file you received:

shasum -a 256 ~/Downloads/DohFlow.dmg

Compare the output against the checksum on the release page. If they differ, do not open it — tell us at security@dohflow.app.

Build it yourself

The source is the whole product; there is nothing in the DMG that is not in the repository.

git clone https://github.com/dohflow/dohflow.git
cd dohflow
pnpm install
pnpm tauri build

You will need Rust, Node and pnpm. The README has exact versions.

Updates

DohFlow checks for updates on launch and on demand from Settings, against a single pinned release feed signed with our minisign key. If the feed's signature does not verify, or the downloaded update itself is tampered with, DohFlow refuses to install it — it does not fail open. Nothing installs without your click: you see the new version and its release notes first.

You can also watch the changelog or the repository directly.