Theseus Navigator

A Chromium-based browser with native .bch / BCNR name resolution built in. No OS-level daemon, no DNS shim, no root-store install. Type hello.bch in the address bar and it just works.

Download for Windows How it works

Download

Theseus ships from its own site — theseus.x — so the version and checksums you see are always the current build, not a snapshot cached here. Windows installer + portable, plus Ariadne Resolver (lighter, no-browser).

Open theseus.x downloads → Full Theseus site
Why not list versions here? Theseus updates weekly; a hardcoded version on this page went stale within days last time. theseus.x is the single source of truth — its own operator ships the current build, and Sirius.X links there instead of duplicating.

How Theseus works

Theseus is a Chromium wrapper (Electron) with two things regular browsers don't have: in-process BCNR name resolution, and a certificate-verify hook that trusts on-chain TLS fingerprints instead of the OS root store for BCNR hostnames.

  1. Address bar accepts .bch / .x / any BCNR TLD. The URL parser is short-circuited: any hostname whose TLD is in the registry is resolved by walking the chain via the built-in bns.js — never through DNS.
  2. Records decide how the site is served. h renders inline HTML from the OP_RETURN payload itself. s3 serves from a Sia bucket via the in-app gateway. ip connects to a server by IP. u redirects. Priority is handled by the shared record-picker.
  3. TLS verifies against on-chain fingerprints. Electron's setCertificateVerifyProc is intercepted: for BCNR hostnames, instead of walking the OS trust chain, the leaf's SHA-256 fingerprint is compared to the tls record on chain. Matches → trusted. No tls record → the browser falls back to the local root CA.
  4. Provenance indicator in the URL bar. A tiny badge shows whether the page came from the chain, from Sia, or from an IP-configured server — with the NFT category shown on hover. The decentralized padlock.
What Theseus is NOT. Not a wallet — for that, use Deviant, Cashonize, Paytaca, or the built-in browser wallet at the name search. Not a hosting service — for that, register a name and point its records at any host (Sia, VPS, your own server). Theseus just makes those names openable in a normal-feeling browser.

Verify a download

The binaries are unsigned (Windows will show a SmartScreen warning). Before running, verify the SHA-256 against what the operator publishes on-chain — the current hashes live on the theseus.x download page itself, alongside each release:

PowerShell:
Get-FileHash <downloaded-file>.exe

Bash:
sha256sum <downloaded-file>.exe

Compare the digest to the hash panel on theseus.x/#verify. For a stronger guarantee, sign in with the wallet and check that the release-signing key matches the on-chain identity for releases.silentmode.bch.