Five steps. Five minutes.
- 1Download the installer
Get utxo-one-security-setup-x64.exe from the Download page. The installer is signed by UTXO Labs and supports Windows 10 and Windows 11.
- 2Run the installer as admin
Right-click → Run as administrator. The installer auto-detects existing antivirus and asks whether to disable it or run in coexistence mode.
- 3Pick the components
By default everything is on: file guard, web protection, VPN shield, Web3 guard, private browser, identity watch. Toggle off anything you don't want.
- 4Activate your license
Paste the license key from your email or sign in with UTXO Pay. The Free tier works without a key — only the file guard + web protection stay on.
- 5First protection cycle
On first launch One Security runs a 5–10 minute baseline scan and indexes installed extensions, wallets and email inboxes for the identity watch.
What every screen actually does.
The single number on the home screen is the protection score: how many engines are live, how many threats were blocked in the last 24h and any pending action. Tap the score to expand the detail.
Three modes: Quick (~2 min, common malware paths), Smart (~10 min, full risk profile) and Custom (you pick the folders). Schedule any of them in Settings → Scan schedule.
Startup audit shows what slows boot. Junk cleaner deletes browser caches, installer leftovers and downloaded crash dumps — your real documents are never touched.
Browser interstitial that blocks phishing pages and known malware domains before any payload reaches the page. Works in Chrome, Edge, Brave and the bundled Private Browser.
Watches every wallet popup. Drainer signatures are matched in under 40 ms, unlimited approvals are flagged in plain language, and any contract with low reputation gets a SafeSign warning before you sign.
Hardened Chromium. Per-tab profile isolation, no third-party cookies, no fingerprinting. Best opened for wallet, banking and government portals.
Lightweight VPN client with kill-switch and per-app routing. No logs ever. You pick the exit region; we don't see what you do once the tunnel is up.
Local Ollama (or the bundled small model) explains every alert, suggests next actions and drafts incident notes. Nothing leaves the device.
Per-device activation, transferable up to twice a year. Renewal is automatic via UTXO Pay. You can also pay one-off for the year — keys stay valid until the next renewal date.
Full price list.
Prices converted from USD reference · FX rates updated daily
The five tickets we see most.
Tap each engine on the home screen. Anything flagged amber needs action — usually a definition update or a permission you haven't granted yet. The detail panel explains what to enable.
Open Quarantine → pick the file → Restore + Always allow. The whitelist is local and never shared.
Check the Firewall panel — Windows Defender Firewall sometimes blocks the WireGuard service after a Windows update. Click Repair tunnel and re-allow.
Open the alert → Trust this contract for this site. The trust is scoped to the origin, never global.
Settings → Diagnostics → Open log folder. Logs are plain text and rotate weekly. They never leave the machine unless you attach them to a support ticket.