Skip to content

MyQRLWallet Desktop 0.2.0

Choose a tag to compare

View all tags
@moscowchill moscowchill released this 01 Jul 22:02
v0.2.0
d09b319

First public release of the MyQRLWallet desktop app: a hardened Electron wallet whose keys live only in an isolated signer process. This is a staging build: the bundled renderer targets the dev environment (dev.qrlwallet.com).

Downloads

Platform File
Windows 10/11 (x64) MyQRLWallet-Setup-0.2.0.exe (NSIS installer)
Linux (x64) MyQRLWallet-0.2.0.AppImage (universal)
Debian/Ubuntu (x64) myqrlwallet-desktop_0.2.0_amd64.deb

Highlights

  • Multi-wallet: multiple accounts on one device, each encrypted under its own password. Add, switch, and remove accounts individually.
  • Import routes: recovery mnemonic, raw hex extended seed, and encrypted wallet file (parity with the web and mobile wallets).
  • Security hardening: strict Content-Security-Policy (script-src 'self', no inline/eval) delivered as a real file:// response header, with the file handler contained to the app bundle (arbitrary host-file reads are refused). Chain id is never guessed: an unreachable node fails signing loudly, and the value shown in the trusted confirmation dialog is exactly the value signed.
  • Durability: atomic encrypted-seed writes with corrupt-file quarantine, plus a one-shot migration of the legacy single-wallet store.
  • Native, app-drawn unlock window with an account picker; per-account "Remove Account" gated by a trusted main-process confirmation that names the address.

Verification

Desktop gates green (format, lint, typecheck, 38/38 tests, full build). Verified live on Windows and under WSLg: create, import by mnemonic and hex seed through the real UI, duplicate rejection, account switch + picker unlock, legacy migration, and the contained file handler (arbitrary reads 403'd, renderer assets served with the CSP header).

Important: unsigned binaries

These artifacts are not yet code-signed or notarized. On first launch:

  • Windows: SmartScreen will show "Windows protected your PC". Click More info -> Run anyway.
  • The Linux AppImage needs the executable bit: chmod +x MyQRLWallet-0.2.0.AppImage.

Code-signing (Authenticode) and macOS notarization are the next step. A macOS build is not included in this release.

Full notes: CHANGELOG.md.

SHA-256 checksums

98d30773dda6cf9f629545e978ed3d3be778778b691b22e31197080872413ce0  MyQRLWallet-0.2.0.AppImage
5482190caa1687cf535ca6d636910da25c9201f1823c610dd536e9116f0a247d  myqrlwallet-desktop_0.2.0_amd64.deb
bd5f16ff3519c0971818294d9c40a8cf65d94ba312238853d9feef85cc6635ce  MyQRLWallet-Setup-0.2.0.exe
Assets 6
Loading