Your conversations, on your computer.

What it does

• Everything the phones do. One-to-one chats, groups, broadcast channels, file transfer with drag and drop and paste, safety numbers, sealed sender.
• Pairs with your phone. Show an invite as a QR code and scan it with CarrierPony on iPhone or Android, or paste an invite either way.
• Direct on your network. Turn on local delivery and messages to a contact on the same Wi-Fi go straight across, no relay in between.
• Locked at rest. Your keys, contacts and messages are encrypted on disk under a launch passphrase, and the app locks itself when you step away.
• Several identities. Keep separate accounts on one computer, each with its own contacts and inbox.
• Stays out of the way. Closes to the tray with an unread badge, notifies without showing names unless you ask it to, and can start when you log in.
• A command line too. The same binary sends, receives and pairs from a terminal, handy on a server or a Raspberry Pi.
• Nine languages. English, Deutsch, Español, Français, Italiano, 日本語, Português, Русский and 中文, switchable without a restart.

Installing

macOS

Open the .dmg and drag CarrierPony into Applications. macOS may ask once whether to open an app downloaded from the internet; that's standard for anything installed outside the App Store.

Windows

Run the .msi and follow the installer. The installer isn't code-signed yet, so SmartScreen may show "Windows protected your PC" the first time. Click More info, then Run anyway.

Debian and Ubuntu

sudo apt install ./CarrierPony-linux.deb

On an ARM board, use the arm64 .deb instead.

Any other distro

AppImage, for x86_64 or aarch64:

chmod +x CarrierPony-*.AppImage
./CarrierPony-*.AppImage

Portable tarball, for x86_64 or aarch64:

tar -xzf CarrierPony-linux-*.tar.gz
./CarrierPony/bin/CarrierPony

Verify what you downloaded

Every file is listed in SHA256SUMS, and that list is signed with the CarrierPony key (signature). Each installer also has its own .asc beside it on the release.

gpg --verify SHA256SUMS.asc SHA256SUMS
shasum -a 256 -c SHA256SUMS --ignore-missing

The signing key fingerprint is A0CB C8F6 5AAC E56F 1C5B 7677 53F9 798E 4919 DE62, the same key that signs the Android APK. Get it from the PGP key page.

Open source

The desktop app is Apache-2.0 and compiles the Android app's crypto core and messaging code verbatim, so there's one tested implementation behind every device. Source, issues and release notes are at github.com/norsehorse-dev/CarrierPonyDesktop.