Download Legato
Version 0.3.87 · September 10, 2026Free, no account, no key. Linux and Android are on the way.
- Signed with our own certificate soonWindows shows our name where it would otherwise say “Unknown publisher”.
- Signed and notarised by AppleIt opens with a double click — macOS raises no “unidentified developer” wall.
What happens on the first launch
You are downloading a browser from us directly, not from a store, so both systems will say something the first time. Here is exactly what, and which button to press.
On Windows
The installer puts the browser in your own user folder and never asks for an administrator password.
Windows shows a blue window headed “Windows protected your PC”, and the only button on it says “Don’t run”. Do not stop there. Press the link “More info” first, and the second button appears — “Run anyway”. That is the one you need.
Where that window names the publisher it will say “Unknown publisher”, and that is expected right now: our signing certificate has been bought and is going through the certificate authority’s identity checks. Until it is issued there is nothing to sign the file with. The Mac build is already signed and notarised by Apple; Windows is the one still waiting.
So the name is not what tells you this file is ours — the number below does. It is the checksum of the exact file we published: run the command, compare, and you have checked the file itself rather than a label on it.
On a Mac
The image opens with Legato on the left and a shortcut to Applications on the right: drag the first onto the second, and that is the install.
The first time you start it, macOS asks once whether to open an app downloaded from the Internet. The buttons are “Open” and “Cancel”, and “Open” is the default one — Return presses it. The question is asked once and never comes back.
There are two files, one per processor, and the wrong one will not start at all. If you do not know which Mac you have: Apple menu, “About This Mac” — the line says either “Apple M…” or “Intel”. With VoiceOver, that window reads out on its own.
Check that the file is the one we published
The number below belongs to that exact file. Run the command, and compare what it prints with what is written here: if they match, nothing was changed on the way to you.
On Windows · File: Qiksy-Legato-Setup-0.3.87.exe · Size: 175 MB
SHA-256: 8de2b4915b4a73f48fc75e5839e98066daccaf8aaaf54996044fdf9a99bfa31e
Check it with: certutil -hashfile "%USERPROFILE%\Downloads\Qiksy-Legato-Setup-0.3.87.exe" SHA256
On a Mac · Apple Silicon · File: Qiksy-Legato-0.3.87-arm64.dmg · Size: 191 MB
SHA-256: 3db1cdf6860a76c3effdabe4d5ca722e974c8dfe981dde1a69beeb31df56293b
Check it with: shasum -a 256 ~/Downloads/'Qiksy-Legato-0.3.87-arm64.dmg'
On a Mac · Intel · File: Qiksy-Legato-0.3.87-x64.dmg · Size: 201 MB
SHA-256: 2150d63ec0fa2e644ee29781566bd2a5315dc622066a558161a5f754ef658ba2
Check it with: shasum -a 256 ~/Downloads/'Qiksy-Legato-0.3.87-x64.dmg'
Accessibility where the developer never built it
A Chromium browser with a repair engine. The engine may only ADD semantics, and only from a closed whitelist: the site’s markup is never rewritten, and the page never changes visually.
- 1operation the engine can perform: set an attribute
- 11attributes it may set — nothing else passes the validator
- 24ARIA roles it may assign; composite widgets are out of scope
- 25interface languages, following the system language
what one repair actually looks like
- op: set-attr · selector: "button.icon-cart" · attr: aria-label · value: "Basket, 3 items"
- Applied: the button now has a name. The structure of the page is unchanged.
- aria-hidden is not on the whitelist and will not be: hiding content from a reader can do more harm than doing nothing at all.
- Anything the validator does not recognise is dropped in silence — wrong ARIA is worse than missing ARIA.
The rule-based repairs run offline, on the person’s own computer. AI repair, when it is asked for, sends the structure of that one page and nothing else.