Are open-source offline dictation apps like Handy and Murmur safe to use?

Yes, generally. Handy and Murmure are built to turn your speech into text on your own computer, and their source code is public, so anyone can read what they are designed to do. Offline use is the strongest protection they offer, because your voice never has to leave the machine. It does not settle everything, though. Safety in practice also depends on where you got the file, whether your operating system can verify it, and which permissions you grant.

A search for "Murmur" most likely means Murmure, a dictation app made by the developer Kieirra. Its README gives install steps for Windows, macOS and Linux. Handy is made by the developer cjpais and is described on its GitHub page. The rest of this answer applies to both.

Both apps are designed to keep your speech on your computer

Handy's README says that transcription happens on your own computer "without sending any information to the cloud" ¹. Murmure says it turns speech into text with no internet connection and zero data collection ². Both are statements by the developers, so treat them as claims to check rather than guarantees.

Murmure's privacy policy, dated March 16, 2026, is more specific. It says the app does not include analytics or telemetry ³. A policy describes intent, so the policy is a reason to look at the code and settings, not a substitute for checking them.

Offline use still involves some network contact

Two network contacts are worth knowing about. Neither one sends your recordings.

Handy downloads speech models, and you can install them by hand

A dictation model is a large file, and Handy fetches it. The README says that where Handy cannot download models automatically, you can download the model files yourself and install them ⁴. The first setup therefore needs internet access, or a manual copy of the model. After that, the transcription itself runs on your computer.

Murmure checks for updates when it starts

Murmure's privacy policy says that on startup it checks for updates by contacting its updater endpoint, which is hosted on GitHub. It also says other network features are opt-in, such as downloading updates, enabling a local HTTP API, or connecting to a language model endpoint you set up ⁵. So the update check is the default contact to know about, and the other features only run if you switch them on. The policy we read does not describe a setting that turns the update check off, so look in the app's own settings.

Open source lets you read the code, but signing shows where a file came from

Open source means the code is public. It does not prove that the file you downloaded was built from that code. Two checks cover that gap.

On a Mac, Apple's Gatekeeper checks each downloaded app before it opens. Apple says an app that has been notarized has been checked for malicious software, and none was detected ⁶. Neither Handy's README nor Murmure's README, as we read them on October 17, 2026, mentions Apple notarization. So before you rely on a Mac build, check the release page and macOS's own warning rather than assuming.

On Windows, Murmure's README credits SignPath with free code signing on Windows. Its roadmap, however, lists signing the inner murmure.exe, not only the installers, as an open item marked under consideration ⁷. That suggests the installers are signed while the program file inside them is not yet. Neither point is a reason to avoid the app, but it is a reason to check the signature on the file you download.

Permissions matter more than the license

Both apps ask for the microphone, and on a Mac they also ask for Accessibility. Handy's README tells you to grant "necessary system permissions (microphone, accessibility)." Accessibility is the powerful one, because it lets an app act inside other apps. Apple advises users to be cautious and to grant access to a Mac only to apps they know and trust ⁸. For how the permission works, read our permissions guide and the question on why dictation apps need Accessibility access.

Yap, which we make, is also an on-device dictation app for Mac and Windows. Check its permission list and privacy policy with the same questions you would ask of Handy or Murmure.

What to do before you install

1. Download only from the project's own release page. Handy's README points to its releases page or its website. It also notes that the Homebrew cask and the winget package are not maintained by the Handy developers. For Murmure, the README points to its release page for the Windows installer.
2. Read the warning before you override it. If macOS says it cannot verify the developer, Apple advises checking for an updated version or an alternative app. It says you might be able to override the setting temporarily, but only if you are certain the app is from a trustworthy source and has not been tampered with ( Apple's Safely open apps page).
3. Check the file's digital signature on Windows before you run an installer. A valid signature shows who signed the file and that it has not changed since.
4. Grant only the permissions the app needs. Give the microphone and Accessibility to the dictation app you chose, and turn them off when you uninstall it. Our permissions guide shows where each setting lives.
5. Test the offline claim yourself. After the model is installed, turn off your internet connection and dictate a short passage. If it still works, the transcription does not depend on the network. This test does not cover update checks, so keep the startup check in mind.

Open-source is a reason to look closer, not a verdict

Open source does not make any app safe on its own. It makes it possible for others to inspect the code, and it makes it easier to spot problems. It does not tell you whether the developer is careful, or whether a copy from a third-party site matches the official project. A well-built closed app can be safer than a careless open one. Compare the apps on the signals in this answer, not on their license alone.

If you want a dictation app without a separate download, the built-in options are also worth weighing. Read our answers on whether Apple dictation is safe and whether Windows voice typing works offline. For more on the terms used here, see the glossary entries for on-device speech recognition and the macOS Accessibility permission.

Related questions

• What is the Handy dictation app?
• Open-source dictation on Mac
• Open-source dictation on Windows
• Can third-party keyboards see what you type?
• Can apps read your clipboard?

For the wider picture, see our voice privacy overview.