Downloads

Every release is published once and never changes: same file, same fingerprint, forever.

Android

Download for Android v1.5.0 · 44 MB · Android 7+

Older (32-bit) phone? Download the 32-bit version (40 MB). Not sure? Try the normal one first — if it won't install, this one is yours.

When installing, Android will ask permission to "install unknown apps" — that's normal outside the stores. Afterwards the app updates itself.

Android will also offer to scan the app the first time — that's normal for apps installed outside Play. Tap "Scan app": it passes.

Share it with no internet: you can pass the installer phone-to-phone (Quick Share, Bluetooth, cable). Android verifies the developer signature on install, so a tampered copy won't install over the original.

Linux

AppImage x86_64 — v1.5.0 · 22 MB

Make it executable (chmod +x) and open it. It updates itself, downloading only what changed between versions.

Windows

Installer x86_64 — v1.4.1 · 19 MB

Open the installer and follow the steps. It sets up a small background service so that connecting never asks for permission again. Windows may warn that the publisher is unknown — choose More info, then Run anyway.

Coming

macOS iOS

Official builds are coming for every platform. They'll be announced here and in the app.

Verify your download

Check that your file is exactly the one we published by comparing its SHA-256 fingerprint (sha256sum <file> on Linux, certutil -hashfile <file> SHA256 on Windows):

FileSHA-256
tocoro-1.5.0-24-arm64-v8a.apk56aaff678d0eb7ee80ef14c4f94a079a0a345f7135f04d7cf12afce7ed7c3d6a
tocoro-1.5.0-24-armeabi-v7a.apk13f1629358616a6866b20a6a15b26cac95b3f809e296e67e130ae6f4b9172350
tocoro-1.5.0-24-linux-x86_64.AppImage563fa541f3e5a0b0e4c27c69bbd718557bde90d409ed65b62e14c6ffd7e86ae4
tocoro-1.4.1-23-windows-x86_64-setup.exec8251d9125bf06f757ec1063ee3521fa161deb6e4aef61b488fb1088d3718a3c

Every Android release is signed with the same certificate. SHA-256 fingerprint of the signing certificate:

CD:94:27:AC:B0:C6:C6:C7:CF:3D:FD:A6:97:92:B1:20:82:D6:15:0D:33:50:CA:F0:55:12:59:05:46:12:25:0B

Is this site blocked where you are?

VPN websites are usually the first thing to get blocked. Three things keep you connected:

  • The app doesn't need this site. Once installed, it connects and updates through its own channels.
  • Share it offline. The installer passes phone-to-phone and every copy verifies itself on install.
  • Alternative channels. Save the Telegram channel @tocorovpn: every new release is announced there, and mirror domains will go there once they exist.