Rand Wallet v0.6.9

Built for Rand testnet chain 20 (cut 2026-10-01 on fullnode v0.6.8, c9c9bd3; its nodes now run v0.6.9, 3f43101, which this wallet core vendors). Same chain as wallet 0.6.8: no new chain, no new keys, your wallet and its history carry over. Update: 0.6.8's built-in prover stops working when 0.6.9 ships — 0.6.8 reaches the RandProtocol provers through one shared key, which is retired with this release. Until you update, a 0.6.8 browser wallet or phone cannot send unless you pair your own prover.

Testnet software: not audited, not for real value.

Download

you have	file
macOS, Apple silicon	rand-wallet-0.6.9-macos-arm64.dmg
macOS, Intel	rand-wallet-0.6.9-macos-x64.dmg
Windows 10 / 11	rand-wallet-0.6.9-windows-x64.msi (or …-setup.exe, the same app)
Debian, Ubuntu	rand-wallet-0.6.9-linux-x86_64.deb
Fedora, openSUSE	rand-wallet-0.6.9-linux-x86_64.rpm
any other Linux	rand-wallet-0.6.9-linux-x86_64.AppImage, or the bare binary in …-linux-x86_64.tar.gz
Linux on arm64	the same four, named …-linux-arm64.…
Chrome, Edge, Brave	rand-wallet-chrome-0.6.9.zip — unzip, then Load unpacked at chrome://extensions
Firefox 140+	rand-wallet-firefox-0.6.9.zip — Load Temporary Add-on… at about:debugging
Android 8+	rand-wallet-0.6.9-android.apk
to build it yourself	rand-wallet-0.6.9-source.tar.gz — this repository and its submodule

iOS has no download (Apple installs only from TestFlight or the App Store); build it in Xcode from the source. rand-wallet-0.6.9-android.aab is the bundle submitted to Google Play, attached for the record; a phone installs the .apk.

Check it

shasum -a 256 -c SHA256SUMS --ignore-missing     # macOS
sha256sum -c SHA256SUMS --ignore-missing         # Linux

Get-FileHash .\rand-wallet-0.6.9-windows-x64.msi -Algorithm SHA256

First launch

Nothing here is signed with a paid developer certificate yet.

• macOS: System Settings → Privacy & Security → Open Anyway, or xattr -dr com.apple.quarantine "/Applications/Rand Wallet.app".
• Windows: SmartScreen → More info → Run anyway.
• Linux AppImage: chmod +x it first.
• Android: signed with this project's upload key, certificate SHA-256 75:22:2E:BF:22:D3:95:80:A5:11:2A:AC:B7:EC:2E:03:93:91:07:77:96:E0:45:1D:7B:CF:E3:7E:FA:06:53:52.

A device that can make a proof (the desktop app, about 8 GiB) makes it. One that cannot — a browser, most phones — now uses the RandProtocol prover by default (https://prover.randprotocol.org, four machines run by the validators, no fee), after a one-time notice: like any prover it is sent the wallet's viewing key, so its operators can read the wallet's whole history, and it can never spend. Settings → Prover chooses your own prover instead (the desktop app's Prove for my other devices, or your own server), which is then always preferred, or none (docs/prover.md). Details, and how to build every client from source: the README and https://randprotocol.org/clients.

Since v0.6.8

• The RandProtocol provers, each with its own key. The default prover is now a pinned list of four machines (a, archive2, nyc3, sfo3), each holding its own key rather than one key shared by all. A proof job is sealed to the one machine that makes it; a machine that is busy or away is skipped and the next one asked, and Settings → Prover shows which machines the wallet trusts, by fingerprint. Wallet 0.6.8's shared key is retired with this release (audit v7 VK-9).
• Proving shows how far along it is: a ring fills towards the time a send usually takes on this device (RAND, an RPL token, a withdrawal, a durian.market swap each learned separately), with the time left.
• The transaction hash can be copied on the Sent screen, and Open in randscan goes to randscan.org/transactions/<hash>.
• Touch ID is offered after a password unlock in the Chrome extension, so it becomes the way in without a trip to Settings.
• Fee notes from bridge withdrawals are found by the phone apps too.