Try Omarchy on Windows is the no-repartition way to kick the tires on DHH’s Arch + Hyprland desktop. Late September into October, the launcher shipped a security patch and then an on-ramp that actually lets the trial become a real install. If you shared SSH or planned to migrate, update.
v0.6.2: keys only for quick-start
v0.6.2 (September 29) closed a hole in the quick-start path. That path created an omarchy account with password omarchy and password-free sudo. Forward guest port 22 — especially to your LAN — and anyone who could reach it could take the guest. After the update, that account accepts SSH keys only, and Try Omarchy authorizes your key when you set up the forward. Existing quick-start installs pick it up on first boot after updating. New installs default toward choosing your own username and password.
v0.7.0 / v0.7.1: trial → install, then harden the importer
v0.7.0 adds Settings → Recovery → Install Omarchy: BitLocker checks, Windows prep, and an import command that can carry settings, files, and app data into a native install. v0.7.1 hardens that importer — it validates package/app/theme names before handing them to pacman, yay, or Flatpak, runs only system tools (no PATH substitution from the trial disk), and refuses to follow links that point outside the trial. If you already imported on 0.7.0, you do not redo it; still worth being on 0.7.1+.
Netops takeaway: trial VMs with forwarded SSH are attack surface. Importers that trust guest-supplied names are also attack surface. Omarchy is moving fast on both. Grab the latest TryOmarchy.exe from the releases page, or let the launcher update itself, then verify your SSH forwards and account passwords.
If you used quick-start before 0.6.2, boot once after updating so the migration can flip SSH to keys-only, then run passwd on any account that still feels too guessable. If you plan a native install from a polished trial, do it from 0.7.1+ so the importer’s name checks and link rules are in play. Small habits. Real blast-radius cuts.
Happy hacking.
References & Further Reading
- GitHub – v0.6.2 – Quick-start SSH keys-only security fix.
- GitHub – v0.7.0 – Trial-to-native install importer.
- GitHub – v0.7.1 – Importer hardening + Chinese UI.
- Try Omarchy – Official try-on-Mac/Windows/Linux landing.
- Sudo Agent – Sep 30 catch-up – Plain-language summary of the 0.6.2 SSH fix.
- Sudo Agent – Windows 0.7 – Importer walkthrough and 0.7.1 hardening notes.