Device-held keys
WireGuard private keys are generated and stored on each device.
PRIVATE MESH · USER-OWNED EXITS
A secure path back to
your own network.
Connect approved devices, a home NAS, office services and exits you own in one trusted private network. Private keys stay on devices; relays forward WireGuard ciphertext only.
RATELMESH● BETA
APPROVED DEVICELaptopdevice-held key
PRIVATE SERVICEHome NASprivate address
WireGuard ciphertext
USER-OWNED EXITHome / Office / Cloud
EXITPLATFORM READINESS
Five targets, at different stages.
This is a transparent beta, not a production-signed five-platform release.
| Platform | Current status |
|---|---|
| macOS | Installable beta; Apple notarization pending. |
| Windows | x64/ARM64 beta; Authenticode pending. |
| Linux | x64/ARM64 CLI beta. |
| Android | Debug-signed test APK; test devices only. |
| iOS | Unsigned developer preview; not directly installable. |
TRUST BOUNDARIES
What works, and what is still missing.
Ciphertext relay
Relays cannot decrypt tunnel content, but still observe timing, peers and traffic volume.
Production trust chain
Platform signing, notarization, an independent audit and multi-region relays remain incomplete.
Full security boundariesPrivacy noticeBeta termsService status
CREATE YOUR PRIVATE NETWORK
Verify your email and create a one-use enrollment code.
After verification, download the client, approve the required system access and enter the code on the device. If you do not have an always-on Mac, Linux host or NAS, configure an exit first.