Download Reach

Pick your platform. These point at the current release and update themselves, so this page never goes stale between releases.

Latest release · v0.8.9All releases and changelog

Windows10 and 11, 64-bitInstaller (.exe)20.2 MB macOSApple siliconDisk image (.dmg)27.3 MB macOSIntelDisk image (.dmg)29.7 MB LinuxRuns anywhereAppImage102.5 MB Android64-bit ARM, nearly every phoneAPK29.6 MB

Other formats:Windows MSI Android, older 32-bit phones Debian / Ubuntu (.deb)Fedora / RHEL (.rpm)

What installing Reach does

What it is: Reach is a desktop and Android app: an SSH client with SFTP, remote desktop (RDP and VNC), tunnels and an encrypted vault. One app, nothing bundled with it.
Windows: The installer asks whether to install for you or for everyone. If Microsoft Edge WebView2 is missing (some Windows 10 PCs), it downloads it from Microsoft. Remove Reach from Settings → Apps.
macOS: Drag Reach into Applications. To remove it, move it to the Trash.
Linux: The AppImage runs without installing anything. The .deb and .rpm packages install through your package manager, with WebKitGTK and a tray-icon library as dependencies, and are removed the same way.
Android: The APK asks for one permission, Internet. Uninstall it like any other app.
On your computer: Reach does not start with your computer unless you turn that on in Settings. Updates are offered in the app and installed only when you agree, after their signature is checked.
Your data: No account and no telemetry. On its own, Reach only asks GitHub whether there is a new version; everything else connects because you asked. Every connection it makes.
Removing it fully: Uninstalling keeps your encrypted vault in a com.reach.app folder in your user data folder, so a reinstall finds your sessions. Delete that folder to remove everything.
Licence: Free and open source under the MIT licence. Read the licence and the code.

After downloading

Windows. The installer is not signed with a paid certificate, so SmartScreen will warn you. Choose More info, then Run anyway.

macOS. The app is ad-hoc signed rather than notarised, so Gatekeeper blocks it on first launch. Right-click the app and choose Open, or clear the quarantine flag:

xattr -cr /Applications/Reach.app

Linux. The AppImage needs to be marked executable before it will run:

chmod +x Reach_*_amd64.AppImage
./Reach_*_amd64.AppImage

The .deb and .rpm packages are linked under the cards if you would rather install through your package manager.

Install with apt or dnf

Add Reach’s signed repository once, and your system’s own updates keep Reach up to date from then on.

Ubuntu, Debian and their derivatives:

sudo apt install -y curl gpg
curl -fsSL https://github.com/alexandrosnt/Reach/releases/latest/download/reach-packages.asc \
  | sudo gpg --dearmor -o /usr/share/keyrings/reach.gpg
echo "deb [signed-by=/usr/share/keyrings/reach.gpg] https://github.com/alexandrosnt/Reach/releases/latest/download ./" \
  | sudo tee /etc/apt/sources.list.d/reach.list
sudo apt update && sudo apt install reach

Fedora, RHEL and their derivatives:

sudo tee /etc/yum.repos.d/reach.repo <<'EOF'
[reach]
name=Reach
baseurl=https://reachssh.com/rpm
enabled=1
repo_gpgcheck=1
gpgcheck=0
gpgkey=https://reachssh.com/reach-packages.asc
EOF
sudo dnf install reach

The key is trusted for Reach’s repository only (signed-by), not for the rest of your system. Every index is signed with it, and each package is checked against the checksum the signed index lists; a changed index is refused.

Android. The APK is installed outside the Play Store, so Android will ask you to allow installs from this source. The download is for 64-bit phones, which is nearly all of them; older 32-bit phones take the armv7 APK under Other formats. Coming from 0.6.8 or earlier, uninstall the old Reach once first: those releases were signed with a different key, and Android will not install over them.

To get new releases on Android without coming back here, add Reach to Obtainium: it installs updates straight from Reach’s GitHub releases.

Updating

Reach checks for new releases on its own and offers them in place, so this page is only needed for a first install or a fresh machine.