Download vpn.now for Linux
A native GTK app with one-click connect, built on a modern VPN protocol. Ships as a single AppImage that runs on most distributions.
7.0 MB · works with your free vpn.now account.
Run it from the terminal
The Linux build ships as one AppImage that runs on most distributions. Download the file, mark it executable, and run it. Two lines:
The app opens, you sign in, and you connect. Prefer your file manager? You can also right-click the AppImage, open Properties, allow it to run as a program, and double-click it. Either way the result is the same.
On Debian or Ubuntu you can instead install the .deb above: double-click it, or run sudo apt install ./vpn.now-linux.deb. It pulls in GTK, libsecret, and wireguard-tools automatically and adds vpn.now to your apps menu.
No account yet? You can create a free one in under a minute, no card needed. The same login works across every vpn.now app.
Before you connect
The AppImage carries its own GTK runtime. On most current desktop releases everything else it needs is already there, so you can download it and run it.
On an older or minimal system, a connection may fail because a system tool is missing. If that happens, follow the Linux VPN setup guide or contact support and we will help you get it running.
How it connects
The app itself runs as your normal user. It holds no special rights and runs no background daemon. When you press connect, your desktop shows its standard authorization dialog to bring the connection up. You approve it the same way you approve any system change, and that one prompt is the only elevated step.
The config it writes is owned by you and locked to mode 0600 so other users cannot read it. When the tunnel comes down, the temporary config is shredded rather than left on disk. Your account token lives in the system keyring through libsecret, which is GNOME Keyring or KWallet, not in a plain text file.
Your private key is generated on your machine and never leaves it. We store only the matching public key, so even we cannot stand in for your device. You can read the exact VPN protocol details, or set the tunnel up by hand with our manual setup guide.
What you get
- Encrypted tunnel brought up only when you connect.
- Your token is stored in your system keyring (GNOME Keyring or KWallet).
- No background daemon: the app only asks for rights when you connect.
Requirements
- A 64-bit Linux desktop with GTK 4.
- polkit (pkexec), which nearly every desktop includes. The AppImage ships the WireGuard tools inside; the .deb installs them automatically through apt.
Why an AppImage
One file. It runs across distributions without a package manager, without root to install, and without pulling in dependencies that might clash with your system. You can keep it anywhere, move it to another machine, or delete it cleanly when you are done. Nothing is scattered across your filesystem.
Every release is signed and we publish its SHA-256, so you can confirm the file is the genuine build before you run it. Always download it from this page and verify the checksum below if you want to be thorough.
A .deb for Debian and Ubuntu is available above; an .rpm and a NetworkManager backend are on the roadmap for people who want tighter desktop integration. You can also run a tunnel on the network itself; see how to run a VPN on your router. For headless boxes, the manual setup guide is the right path today.
Verify your download
Every official build ships with its SHA-256 checksum. Matching the hash of your file against the value below confirms you have the genuine, untampered build and not a repackaged copy from anywhere else.
Check it with shasum -a 256 vpn.now-linux.AppImage on macOS or Linux, or certutil -hashfile vpn.now-linux.AppImage SHA256 on Windows.
Linux questions
Which distributions are supported?
The AppImage runs on most modern 64-bit desktops with GTK 4, including Ubuntu, Fedora, and Arch. If a connection fails on an older or minimal system, contact support and we will help you get it running.
Do you have a .deb or .rpm?
The AppImage is our primary Linux build. Native packages and a NetworkManager backend are on the roadmap. You can also run from source; see the project README.
Is it safe?
We publish its SHA-256 below so you can verify the file you downloaded matches. The app holds no secret beyond a token you can revoke from your account.
vpn.now on your other devices
One account covers them all.
See every option on the vpn.now apps overview, or set up by hand with the manual setup guide.