TOTEMTOTEMSurf / Download
TOTEMSurfAvailable · v2.2.1Download TOTEMSurf
macOS 14 and later · one build for Apple silicon, one for Intel. Pick the one that matches your Mac. On a PC? Windows download.
Not sure which? Apple menu → About This Mac. If it lists a Chip, you have Apple silicon; if it lists a Processor from Intel, take the Intel build.
This release
- Version
- 2.2.1
- Released
- 2 November 2026
- Requires
- macOS 14 or later
- Apple silicon
- TOTEMSurf-2.2.1-arm64.dmg · 58.7 MBf6ec392eb05cc05da9e8c3592beed1ced0acaecaa5c75129602e5bda93983813
- Intel
- TOTEMSurf-2.2.1-x86_64.dmg · 64.8 MB547553728944ebc445980ab38a9c8fb59d79e8dec4ad9e7a7102082ee146790f
Check it is the file we published
Worth thirty seconds for a browser that will hold your passwords and your server keys. Run this on the downloaded file and compare the result with the SHA-256 on the left — they must match character for character.
shasum -a 256 ~/Downloads/TOTEMSurf-2.2.1-*.dmg
Installing
Drag it to Applications
Open the disk image and drag TOTEMSurf into your Applications folder. Run it from there — an app started from the disk image cannot update itself.
Launch it
No Gatekeeper warning: the app is signed with an Apple Developer ID, notarized, and the ticket is stapled to the image, so it opens even on a Mac that is offline.
Sign in for the VPN
The browser, the SSH console and the assistant work straight away. For the VPN, sign in with your TOTEMVPN account inside the app.
Updates
TOTEMSurf checks update.totemsurf.app for new versions and installs them in place. Every update is signed with a key only we hold, and the app refuses one whose signature does not match — so even a compromised server cannot push you something else.
Removing it
On a Mac, quit the app and drag it to the Trash. Your profiles stay in your user Library until you delete them, and the keys that unlock them stay in your macOS Keychain. On Windows, use Settings → Apps → TOTEMSurf → Uninstall.
Windows 10 and 11 · 64-bit
TOTEMSurf for Windows
This release
- Version
- 2.2.1
- Released
- 2 November 2026
- Requires
- Windows 10 or 11, 64-bit
- Signed by
- Oceanic Consulting VOF
- SHA-256
- TOTEMSurf-2.2.1-setup.exe · 41.6 MB2ec267ebf47969bf49da913ec45bf2712fdf317235c46c148e1c0c2ab2b63968
Check it before you run it
In PowerShell, compare the hash with the one on the left, and check who signed it — the status must be Valid and the signer CN=Oceanic Consulting VOF.
Get-FileHash $env:USERPROFILE\Downloads\TOTEMSurf-2.2.1-setup.exe
Get-AuthenticodeSignature $env:USERPROFILE\Downloads\TOTEMSurf-2.2.1-setup.exe | Format-List Status, SignerCertificate
Installing on Windows
Run the installer
It installs for your own user account, so it does not ask for an administrator password.
Launch it
TOTEMSurf uses Microsoft Edge WebView2 as its web engine, the one Windows 11 and current Windows 10 already include.
Sign in for the VPN
The browser, the SSH console and the assistant work straight away. For the VPN, sign in with your TOTEMVPN account inside the app.
A new release can meet a SmartScreen notice in its first days, while Windows gets to know it. If it appears, check that the publisher it names is Oceanic Consulting VOF, then choose More info → Run anyway. If the publisher is anything else, do not run the file. TOTEMSurf updates itself from update.totemsurf.app, and refuses any update whose signature does not match.