macOS
macOS 13 or later on an Apple silicon Mac, and an administrator password. The installer refuses an older macOS and Intel Macs.
Free and open source, under Apache 2.0. PrivacyFence runs locally on your own machine — nothing you approve or deny leaves it.
Loading the latest release…
We couldn't load the release list just now. You can still download PrivacyFence from GitHub Releases.
Every installer above lists the SHA-256 its build produced. Compare it against the file you received before running it — if the two differ, do not run the file.
shasum -a 256 <file> macOS
sha256sum <file> Linux
Get-FileHash <file> -Algorithm SHA256 Windows
Before you install
macOS 13 or later on an Apple silicon Mac, and an administrator password. The installer refuses an older macOS and Intel Macs.
Windows 10 or later, or Windows Server 2016 or later, on an x64 PC, with administrator rights. Set up Windows Hello (a PIN, fingerprint or face) before you add your first passkey.
Ubuntu 24.04 or Debian 13 or newer, on amd64 (glibc 2.38 and systemd 242), with sudo, and zenity or kdialog for the companion's dialogs. Other Linux systems and arm64 can use pipx install privacyfence, which runs as you and is not privilege-separated.
Platform support has every supported version, where PrivacyFence keeps its data, and its logs.
What the installer does
The DMG holds PrivacyFence.pkg and the Claude Desktop extension, PrivacyFence.mcpb. The package installs /Applications/PrivacyFenceApp.app, creates the _privacyfence service account, runs PrivacyFence under it, and starts the menu-bar icon at each login.
The installer puts PrivacyFence in %ProgramFiles%\PrivacyFence\, runs it as the PrivacyFence Windows service under its own account, keeps your data in %ProgramData%\PrivacyFence\, and starts the tray icon at each sign-in. Its last page offers the Claude Desktop extension.
The .deb puts a self-contained PrivacyFence in /opt/privacyfence, runs it as the privacyfence-daemon system service under the privacyfence account, keeps your data in /var/lib/privacyfence, and adds a PrivacyFence entry to your Applications menu.
Every installer runs PrivacyFence under its own service account, so an AI client running as you cannot read or change its policy, passkeys, audit log or connector credentials. Log out (on Windows, sign out) and back in once after installing, so your account can reach it.
After you install
Not sure whether it is free, whether your data leaves your computer, or how to check a download? The FAQ answers those, including how to verify a download.
Pre-release builds get the same checks as stable, but they are newer and less proven. Install them alongside nothing you rely on. The newest release on every channel is in the release history.