# Install infrawrench

Pick the desktop app or the web app and get to an empty workspace.

Infrawrench ships in three forms. Desktop and web share the same plugins, resource views, and features — the difference is where your credentials live and how you sign in; mobile is a cloud companion with a deliberately smaller read-and-respond feature set. For the longer comparison, see [Desktop, web, and mobile](../core-concepts/desktop-vs-web.md).

- **Desktop app** — local-first. Credentials live in an encrypted SQLite database on your machine and nothing leaves it unless you opt in to cloud sync. No sign-in required.
- **Web app** — hosted, multi-user. Sign in with email or SSO, invite a team, share an organization.
- **[Mobile app](../features/mobile-app.md)** — iOS/Android companion to the web app's cloud org: dashboards, resource browsing, chat, terminals, and push notifications on the go.

You can start with either and link them later.

## Desktop app

### Download

Download the build for your platform:

- **macOS** — universal `.dmg`
- **Windows** — `.msi`
- **Linux** — `.AppImage` or `.deb`

![Download page with platform buttons](https://agent-assets.infrawrench.com/docs-screenshots/getting-started/install/download-modal.png)

Credentials are stored in a local SQLite database, encrypted with AES-256-GCM using a key held in your OS keychain.

### First run

On first launch you see a welcome screen that explains what signing in to Infrawrench Cloud adds — syncing to web and mobile, team organizations, cloud-side workflows and deployments, budgets and alerts — and offers two ways in:

- **Sign in to Infrawrench Cloud** — opens your browser to sign in. Once you're back, pick the organization you want to start in (or **Use locally for now**). If you're not in an organization yet, the app points you to the web to create one, then picks it up when you return.
- **Continue without an account** — skip straight to a fully local workspace. Nothing is uploaded, and you can sign in later from the sidebar.

Either way, the next step is the same: click **Add account** to connect your first cloud or service — see [Add your first account](./add-first-account.md).

### SSH agent integration

- **macOS / Linux** — keys in `~/.ssh/` are auto-detected for the [SSH terminal](../features/ssh-terminal.md).
- **Windows** — Pageant is supported if running. Keys added to Pageant show up in the key picker.

### Updating

The desktop app checks for updates on launch and every four hours, and downloads them in the
background. Once an update is unpacked and ready to apply, Infrawrench asks whether you want to
restart:

- **Restart now** — quits and relaunches into the new version.
- **Later** — the update is applied the next time you quit Infrawrench.

The prompt only appears once restarting is guaranteed to work, so there is a gap between the
download finishing and the prompt showing up. If preparing an update fails — most often because the
disk is full — Infrawrench tells you what went wrong instead of failing quietly, and retries on its
next check.

## Web app

### Create an account

1. Go to [app.infrawrench.com](https://app.infrawrench.com). There is no separate sign-up page and no login screen in the app — arriving signed out hands you straight to Infrawrench's identity provider, WorkOS AuthKit, on its own domain. That hosted page is where you choose email, Google, or Microsoft.
2. Sign in or create the account there. You come back to Infrawrench once it succeeds.
3. On first sign-in you are prompted to **Create your organization**. Pick a name you can live with — it shows up in the workspace switcher.
4. After creating it you **Choose your plan**: **Free** ($0) or **Pro** ($20 / seat / month). **Continue with Free** is fine — you can upgrade later from **Settings → Billing**. See [Billing and plans](../team-and-billing/billing-and-plans.md).

Finish sign-up in the browser you started it in. Verifying your email can take you through your inbox and back, and if that round trip lands in a different browser — a link opened inside a mail app, say — you land on a **Sign-in could not be completed** page and have to start again. Taking your time is fine; switching browsers mid-flow is not.

### Your first landing

After sign-up you land on an empty dashboard with a sidebar that has no accounts yet. Two things to do next:

- **Add an account** — connect a cloud or service so infrawrench can list your resources. Start with [Add your first account](./add-first-account.md).
- **Invite your team** (optional) — see [Organizations and invites](../team-and-billing/organizations-and-invites.md).

### Free tier vs paid

The free tier includes:

- 1 user
- Up to 3 connected accounts
- No audit log, no API keys

Paid ($20 / seat / month) removes those caps and unlocks the [audit log](../team-and-billing/audit-log.md) and [API keys](../team-and-billing/api-keys.md). See [Billing and plans](../team-and-billing/billing-and-plans.md).

## Using both together

The two apps can be linked so the same workspace is available in both places. Credentials stay encrypted at rest on either side.

- **Desktop → web** — open **Settings → Cloud sync** in the desktop app, click **Link account**, sign in via the browser (OAuth with PKCE, no shared secret), and pick the organization to sync into.
- **Web → desktop** — install the desktop app, sign into the same organization from **Settings → Cloud sync**, and your resources pull down so you can work offline. Both stay in sync when you reconnect.

You can unlink at any time; the desktop copy is not deleted.