Install Vaulthalla
Choose a platform and install Vaulthalla - Linux through APT or macOS through the installer package or Homebrew.
Install Vaulthalla
Vaulthalla runs on Linux and on Apple Silicon Macs. Both run the same daemon, web console, CLI, encryption, access control, sharing and S3 gateway; they differ in how the service is installed and managed, how master keys are protected, and whether vaults can be mounted as a filesystem.
Choose A Platform
| Linux | macOS | |
|---|---|---|
| Hardware | amd64 (x86-64) | Apple Silicon (arm64) |
| Operating system | Ubuntu 24.04 LTS (tested) | macOS 14 Sonoma or later |
| Install channel | APT, apt.vaulthalla.sh | Installer package or Homebrew cask |
| Service manager | systemd | launchd |
| Database | Distribution PostgreSQL (local or remote) | Bundled PostgreSQL 16 |
| Master key protection | TPM2 (hardware or software TPM) | Protected files + FileVault |
| Filesystem mount | FUSE at /mnt/vaulthalla | Not in the package |
| HTTPS | vh setup nginx | vh setup caddy |
| Status | Production | New in this release; see what is not supported yet |
For a server you will rely on, Linux is the more complete platform. A Mac is a good fit for a home or small-office server where the web console, sync, sharing and the S3 gateway cover how you reach your files.
Quick Install
1curl -fsSL https://apt.vaulthalla.sh/install.sh | bashThe installer adds the signed Vaulthalla APT repository and installs the vaulthalla package with PostgreSQL and nginx. Add -s -- --interactive after bash to choose an install profile and the Linux user who administers Vaulthalla.
Then sign in at http://<host>/ as admin with the password in /var/lib/vaulthalla/super_admin_initial_password.
Full guide: Install On Linux.
1brew install --cask vaulthalla/tap/vaulthallaThen sign in at http://127.0.0.1:36968 as admin with the password in /Library/Application Support/Vaulthalla/state/super_admin_initial_password.
Full guide: Install On macOS.
Download vaulthalla-<version>-arm64.pkg from the GitHub releases, then:
1sudo installer -pkg vaulthalla-<version>-arm64.pkg -target /The package is not signed by Apple yet: opening it from Finder needs Open Anyway in System Settings → Privacy & Security once.
Full guide: Install On macOS.
After Installing
Sign in and change the generated password
Every install generates its own
adminpassword and stores a plaintext copy that only root can read. See First Run.Serve it over HTTPS
nginx on Linux or Caddy on macOS, for a private network name or a public domain.
Create a vault and plan backups
Local Vaults, S3 And R2 Vaults, and Backup And Recovery before important data goes in.
Building From Source
Source builds (make install, make dev) are for development. Production installs use the APT package on Linux and the installer package or Homebrew cask on macOS. See Development Setup.