TOTEMSurfAvailable · v2.2.1

Your browser. Your VPN, your servers. All in one window.

Most people run three things side by side: a VPN client, a browser, and a terminal for their servers. None of them knows about the others. TOTEMSurf is those three as one desktop app — and because the tunnel belongs to the browser rather than to the whole computer, it can decide site by site what goes through it.

Download for macOS v2.2.1 · Apple silicon and Intel Download for Windows v2.2.1 · Windows 10 and 11 What is new in 2.2

macOS 14 or later, or Windows 10 and 11 (64-bit). Notarized by Apple on the Mac, signed by Oceanic Consulting VOF on Windows. Updates itself from update.totemsurf.app, and every update is signed.

macOSWindowsPer-site routingSplit view & workspacesEncrypted backupClaude can drive it

New in 2.2

Your browser, arranged the way you work

Seven new things — watch each one.

New in 2.2

Two pages side by side

Split the window between two tabs and drag the divider wherever you like. Drag a tab from the strip onto the page to open it beside the one you are reading.

⇧⌘Y · Ctrl+Shift+YDrag a tab onto the page

New in 2.2

Tab groups and workspaces

Fold a named, coloured group of tabs away and let it sleep. Keep work, research and home in workspaces of their own, each back as you left it.

⌃⌘← → · Ctrl+Shift+PgUp/PgDnGroups sleep when folded

New in 2.2

Messengers in the sidebar

Telegram, WhatsApp, Instagram, Messenger, X, Discord and Slack beside the page — each signed in to a store of its own that no tab can see.

⇧⌘O · Ctrl+Shift+O7 messengersSeparate from your tabs

New in 2.2

Snapshots and a floating video

Capture the visible page, a region or the whole page, and copy or save it. Pop a playing video out into a small window that stays on top.

⇧⌘S · Ctrl+Shift+SNothing kept unless you save

New in 2.2

Flow: to your phone, to your other computer

Send a page, a link or some text to your phone as a QR code, or to your other Macs and PCs, end-to-end encrypted. Files go through TOTEMDrop.

QR codeEnd-to-end encryptedTracking stripped first

New in 2.2

Let Claude use the browser

Turned on, Claude opens pages in tabs of its own, reads, clicks and types. It asks you before it signs in, pays, opens a file or reaches your network.

Off by defaultIts own tabs onlyStop at any moment

New in 2.2

Back up everything, bring it back anywhere

One file, locked with your password: passwords, bookmarks, history, settings, servers and open tabs. Restore it on a Mac or a PC — nothing already there is deleted.

AES-256 · Argon2idMac ⇄ WindowsWeekly, if you want

The one thing a system VPN cannot do

Choose, site by site, what goes through the tunnel

A VPN that covers the whole computer only sees addresses. The browser knows the name of the site you typed — so TOTEMSurf can route each site on its own. Try it:

Turn on JavaScript to try the routing demo. In short: every site goes through the tunnel unless a rule sends it direct or blocks it, and private addresses always go direct.

Private by default

Protection that is on before you look for it

No switch to find and no extension to trust.

Tracking removed from links

utm_source, fbclid, gclid and about seventy more leave every address before the page is asked for.

Your local network, off limits

A page on the Internet cannot reach your router, printer, NAS or this computer.

Same hardware answers as everyone

Cores, memory, graphics, languages, battery: the same on every TOTEMSurf.

Blocking built in

Ads and trackers blocked by the browser itself — EasyList, EasyPrivacy and more.

HTTPS always, private DNS

http:// becomes https://; with the VPN off, names go to Cloudflare or Quad9 encrypted.

Profiles that are really separate

Each with its own encrypted database, cookies and key — and a password if you like.

Passwords behind your fingerprint

Fill with one click; showing, copying or exporting asks for Touch ID or Windows Hello.

TOTEMVPN, inside the browser

A tunnel that knows which site you are on

The VPN belongs to the browser, so it can decide site by site.

Routing per site

Your bank direct, everything else through the tunnel, a tracker blocked outright.

Connected means proven

Green only after traffic has really gone through the server and out the other side.

Nothing slips out while it connects

Pages wait for the tunnel instead of using your own connection.

No leak through video calls

WebRTC is off until you turn it on — calls can bypass a tunnel.

Your things, wherever you are

Move in, stay in step, take it with you

Your Macs and PCs, kept the same — with no account.

Sync without an account

Bookmarks, settings and — if you choose — passwords, through a 24-word code. The server cannot read a word.

Bring everything with you

Bookmarks from Chrome, Edge, Brave, Firefox and Safari; passwords from them and from Bitwarden, 1Password or KeePassXC — and out again.

The TOTEM apps, one rail

TOTEMDrop beside the VPN, a click away.

AI, on your terms

Help when you ask for it, and only then

Your own account for the assistant. Translation never leaves the computer.

An assistant beside the page

Ask about the page you are reading, or open Claude, ChatGPT or Gemini in a side panel.

Translation on your computer

21 languages into English or Persian, right on your machine. Show original puts it back.

For people with servers

Your servers, in the same window

No separate terminal, no separate VPN for the session.

SSH, SFTP and FTP

Split panes, several servers at once, saved hosts, forwarding that reconnects.

Through the tunnel, or not

Each SFTP server goes through the VPN or straight to it — per server.

Host keys you can trust

A changed server key stops the connection; there is nothing to click through.

And the rest

The details that make it yours

Five looks, light and dark

And a new-tab page drawn by the app itself, so a new tab sends nothing anywhere.

Tabs that sleep

Untouched for an hour, a tab lets its page go; a click brings it back.

Pages from your own disk

Open an HTML file from Finder or Explorer and it loads with its pictures.

Ten languages

Every string, with Persian and Arabic mirrored right to left.

Updates you can trust

Signed, and refused if the signature does not match.

What it deliberately does not do

A page that lists only strengths is a page nobody can check.

It is not a Chromium fork.

It uses the web engine your system already has and keeps up to date — WebKit on macOS, Microsoft Edge WebView2 on Windows.

No extension store.

Blocking is built in instead. There is no Chrome Web Store inside it.

It does not tunnel the rest of your computer.

Only the browser's traffic goes through the VPN. For the whole device, use the TOTEMVPN app.

Desktop only.

On your phone, use TOTEMVPN's mobile app.

At a glance

Current version: Mac 2.2.1 · Windows 2.2.1
Platforms: macOS 14 or later · Windows 10 and 11 (64-bit)
VPN: A TOTEMVPN account — sign in inside the app
Engine: WebKit on macOS · Edge WebView2 on Windows
Updates: Automatic and signed, from update.totemsurf.app

Questions

Do I need a TOTEMVPN account?

For the VPN, yes — you sign in inside the app. The browser, the SSH console and the assistant work without one.

Does a site I route direct get slower?

No. A site you send direct never touches the tunnel.

Where are my passwords stored?

Encrypted on your own computer. The key is kept in the macOS Keychain or the Windows Credential Manager, never in a file next to the data.

How do I move everything to a new computer?

Settings → Backup & restore → Back up now gives you one file locked with a password you choose. On the new Mac or PC, Restore from a backup brings your passwords, bookmarks, history, settings, servers and open tabs back. Websites will ask you to sign in again: their cookies are not in a backup.

What happens if I forget the backup password?

Then nobody can open that backup — not you, and not us. That is what makes a copy on a USB stick or in a cloud folder safe. Make a new backup with a password you will remember.

Does Claude see everything I browse?

No. It is off until you turn it on, and it works only in tabs it opens itself, marked as its own. Only an app on this computer holding the key TOTEMSurf gives it can connect. Your own tabs, passwords and history are not shown to it.