Windows installer Recommended
Installs to Program Files with a Start menu entry and an uninstaller. The simplest choice for most people.
Downloadef1adf5ea028f424fdbba5a517b3a9fad097eaa8622ecd39e22ec29099951c7b
Free for any use. No account, no sign-up, no email. Each download is self-contained — there’s no .NET or anything else to install first.
Installs to Program Files with a Start menu entry and an uninstaller. The simplest choice for most people.
Downloadef1adf5ea028f424fdbba5a517b3a9fad097eaa8622ecd39e22ec29099951c7b
Unzip and run from any folder or USB drive. Writes nothing to the registry or your user profile.
Download16eedecce9d6b893a3685edebfafecd8c409063f3988074d14e82d0999c114f0
One self-contained file. Mark it executable and run it; nothing is installed and nothing is left behind.
Downloadbbc81b4784657bde186d0023c8683b34b10c0ed7f412da80522b54d02249270d
Windows may warn you on first run. This release is not yet code-signed, so SmartScreen may show “Windows protected your PC”. Check the SHA-256 below first, then choose More info → Run anyway. Some antivirus products are also wary of the large, unsigned AI engine libraries the app bundles.
Released September 13, 2026. There is no automatic updater — by design, the app never checks for anything. A new version is one you choose to download. By downloading you agree to the license; please link people to this page rather than sharing copies, so the checksums below stay meaningful.
The app is the easy part. The AI model is a separate file you download once and keep wherever you like.
| Windows | Windows 10 or 11, 64-bit (x64) |
|---|---|
| Linux | x86-64, glibc 2.34 or newer (Ubuntu 22.04+, Debian 12+, Fedora 35+, RHEL 9+, Arch), X11 or Wayland with XWayland |
| Memory | At least 8 GB of RAM for a small (3–4B) model; 16 GB is comfortable for a 7–9B model. The app itself uses about 150 MB, but the model is held in system memory too, even when most of it runs on the graphics card: in testing, a 9B Q4_K_M model (a 5.6 GB file) used about 4.5 GB of RAM with 27 of its 32 layers on the GPU. The app shows you the fit before it loads. |
| Disk | About 270 MB for the app, plus your model file (typically 2–5 GB) |
| Network | None. The app runs fully offline. |
| NVIDIA | Supported via Vulkan Tested |
|---|---|
| AMD | Supported via Vulkan Not yet tested |
| Intel Arc / iGPU | Supported via Vulkan Not yet tested |
| No GPU | Runs on the CPU — slower, fully functional |
AMD and Intel GPUs use exactly the same bundled Vulkan engine as NVIDIA, with nothing vendor-specific in between, but they haven’t been verified on real hardware yet. All you need is a current graphics driver. If a card isn’t picked up, the model runs on the processor instead.
My Thought Safe doesn’t bundle a model. You supply a chat model in GGUF format — the same files LM Studio and llama.cpp use — and point the app at the folder. An instruction-tuned model of 7–9B parameters in a Q4_K_M quantization is a good starting point.
Optionally add a small GGUF embedding model for better memory search. Choosing a model →
Any FIDO2 key that supports the hmac-secret extension — YubiKey 5 series, SoloKeys, Nitrokey 3 and most modern keys — can unlock a vault alone or together with a passphrase.
Linux: install libfido2 (sudo apt install libfido2-1) and the udev rule described in the install guide. Windows needs nothing extra.
Compare the SHA-256 of the file you downloaded against the value published here. A match means the file arrived intact and is the one the author published.
Get-FileHash .\MyThoughtSafe-0.10.0-setup.exe -Algorithm SHA256
Or in Command Prompt: certutil -hashfile MyThoughtSafe-0.10.0-setup.exe SHA256
sha256sum -c SHA256SUMS-0.10.0.txt --ignore-missing
Or check one file: sha256sum MyThoughtSafe-0.10.0-x86_64.AppImage
ef1adf5ea028f424fdbba5a517b3a9fad097eaa8622ecd39e22ec29099951c7b MyThoughtSafe-0.10.0-setup.exe
16eedecce9d6b893a3685edebfafecd8c409063f3988074d14e82d0999c114f0 MyThoughtSafe-0.10.0-win-x64-portable.zip
bbc81b4784657bde186d0023c8683b34b10c0ed7f412da80522b54d02249270d MyThoughtSafe-0.10.0-x86_64.AppImage
A matching hash proves where the file came from, not what’s inside it — no hash can. That’s why the license explicitly permits you to take the app apart, and why the security page lists checks you can run on the app itself.