OpenClaw Easy is a free, open-source desktop app for macOS and Windows that runs the OpenClaw AI assistant on WhatsApp, Telegram, Discord, and Slack — here is what each safety claim rests on. The app is open source under Apache-2.0; its repository is github.com/openclaw-easy/openclaw-easy-desktop. The macOS app is Developer-ID signed and notarized by Apple, so Gatekeeper opens it without warnings. The Windows EXE is not code-signed yet: SmartScreen shows a warning on first run, which you dismiss with "More info → Run anyway" — EV code signing is planned. Your API keys, channel credentials, and chat history stay on your own machine; nothing is uploaded to us. The app is free with no subscription — the only optional payment is pre-paid credits for managed premium models.
Is the download safe?
Here is the exact signing status per platform, stated plainly:
| Platform | Signing status | What you'll see |
|---|---|---|
| macOS (DMG/PKG) | Developer-ID signed, hardened runtime, notarized by Apple | Opens cleanly — no Gatekeeper warning |
| Windows (EXE) | Not code-signed yet (EV signing planned) | SmartScreen warning on first run — click "More info", then "Run anyway" |
Always download from openclaw-easy.com, the only place the official installers are published (the macOS DMG is signed and notarized by Apple). The GitHub repository has the source code, not installers. Several look-alike sites distribute their own OpenClaw installers; we can only vouch for ours.
Is it open source?
Yes. The desktop app is licensed under Apache-2.0, with its repository at github.com/openclaw-easy/openclaw-easy-desktop, and it bundles the open-source OpenClaw runtime, which is MIT-licensed and public at github.com/openclaw/openclaw.
Where do my API keys and chat data live?
Locally. Configuration, channel credentials, and chat state live under your user folder (~/.openclaw) on your own computer. When you chat, messages go directly from your machine to the AI provider you configured (Anthropic, OpenAI, Google, or a local Ollama model that never touches the network). If you top up the optional pre-paid credits, those requests route through the OpenClaw Easy gateway to managed models — pay-as-you-go, never a subscription. We do not receive your provider API keys.
What permissions does it ask for?
- Camera — only used to scan the WhatsApp QR code when you pair WhatsApp.
- Microphone — only if you use voice input with AI agents.
- Screen recording — only if you ask the assistant to capture screen context.
Each permission is requested by macOS the first time the feature is used; deny any of them and the rest of the app keeps working.
How to verify the download yourself
On macOS, confirm the signature and notarization in Terminal:
codesign -dv --verbose=2 "/Applications/Openclaw Easy.app"
spctl -a -vv "/Applications/Openclaw Easy.app"The second command should report source=Notarized Developer ID. On Windows, the EXE is unsigned today, so the equivalent check will show no signature — that is expected until EV signing ships. On either platform you can audit or build from the public source.
Frequently asked questions
Is OpenClaw Easy safe to install?
Yes. OpenClaw Easy is a free desktop app licensed under Apache-2.0, with its source at github.com/openclaw-easy/openclaw-easy-desktop. The macOS DMG is Developer-ID signed and notarized by Apple. The Windows EXE is not code-signed yet, so SmartScreen shows a warning on first run: click "More info", then "Run anyway".
Where do my API keys and chat data live?
On your computer. OpenClaw stores its configuration, credentials and chat history under your user folder (~/.openclaw). With your own API key or a local Ollama model, messages go straight from your machine to the provider you chose. Only if you use pre-paid credits do requests pass through the OpenClaw Easy server, which does not store message content.
Is OpenClaw Easy a virus?
No. OpenClaw Easy is open source under the Apache-2.0 licence. On macOS, Apple scans and notarizes every release. The Windows SmartScreen warning appears only because the EXE is not yet code-signed — it is a reputation notice, not a malware detection.
Why does Windows SmartScreen warn about the EXE?
Because the Windows installer is not code-signed yet. SmartScreen warns about any unsigned or low-reputation EXE. Click "More info", then "Run anyway" to proceed. EV code signing is planned; the macOS build is already signed and notarized.
Is OpenClaw Easy really free?
Yes. The desktop app is free. Bring your own API key, run free local models via Ollama, or optionally top up pre-paid credits for managed access. There is no subscription.
Does my chat history leave my computer?
Chat state is stored locally. Message content goes only to the AI provider you chose (or stays fully local with Ollama). With pre-paid credits, requests route through the OpenClaw Easy gateway to the managed model.
Is the WhatsApp connection safe for my number?
WhatsApp pairing uses an unofficial Web API, which carries real account risk if misused. Read the straight answer in our WhatsApp ban-risk guide. Telegram, Discord, and Slack use fully official bot APIs.
Related reading: What is OpenClaw? · Full FAQ · Download OpenClaw · WhatsApp AI bot ban risk