Install OpenClaw on macOS, Windows & Linux in Under 10 Minutes [2026]

OpenClaw is an open-source, self-hosted AI agent gateway that connects LLMs to your local system and messaging platforms. It runs as a persistent background service, letting you interact with AI agents through WhatsApp, Telegram, Discord, or a web dashboard. You can install OpenClaw on macOS, Linux, or Windows in under 10 minutes.

How to Install OpenClaw on macOS and Linux?

To install OpenClaw on macOS or Linux, run the one-line installer script that detects your OS, installs Node.js if needed, sets up the CLI, and launches the onboarding wizard automatically.

Prerequisites

• Node.js: Version 24 (recommended) or 22.16+. ^[1] The installer script handles this automatically if Node is not present.
• Operating System: macOS (Apple Silicon or Intel) or any Linux distribution (Ubuntu, Debian, Fedora, Raspberry Pi OS).
• API Key: From your LLM provider: Anthropic, OpenRouter, or OpenAI.

Installation Steps

Step 1: Open Terminal and run the official installer script.

curl -fsSL https://openclaw.ai/install.sh | bash

This script detects your OS, installs Node.js if missing, installs the OpenClaw CLI globally via npm, and launches the onboarding wizard.

Step 2: Complete the onboarding wizard.

The wizard walks you through these configuration steps:

• Security Acknowledgment: Confirm you understand OpenClaw has system-level access.
• API Key: Enter your LLM provider API key (Anthropic recommended).
• Model Selection: Choose your default model. Claude Sonnet 4.5 balances quality and cost for most tasks.
• Gateway Settings: Select loopback network interface for local-only access.
• Channel Setup: Optionally connect WhatsApp, Telegram, Discord, or other messaging platforms.

Step 3: The installer registers OpenClaw as a background daemon automatically.

On macOS, it uses launchd. On Linux, it uses systemd. ^[1] The agent survives reboots and stays always-on. If you ran the installer without onboarding, you can set up the daemon separately:

openclaw onboard --install-daemon

Step 4: Verify the installation.

openclaw --version
openclaw doctor
openclaw gateway status

All three commands should return valid output. Open the web dashboard with:

openclaw dashboard

This opens your browser to the Control UI at http://localhost:18789.

Alternative: Manual install via npm

If you already manage Node.js yourself and prefer manual control:

npm install -g openclaw@latest
openclaw onboard --install-daemon

How to Install OpenClaw on Windows?

OpenClaw on Windows requires WSL2 (Windows Subsystem for Linux). WSL2 provides a full Linux environment where the CLI and gateway run with complete compatibility. Native Windows support is limited and still improving.

Prerequisites

• Windows Version: Windows 10 (version 2004+) or Windows 11. ^[2]
• Administrator Access: Required to install WSL2.
• RAM: Minimum 8 GB. 16 GB recommended.

Installation Steps

Step 1: Install WSL2 with Ubuntu.

Open PowerShell as Administrator and run:

wsl --install

This installs WSL2 with Ubuntu by default. Restart your computer when prompted. After reboot, Ubuntu opens automatically. Set your Linux username and password.

Step 2: Enable systemd (required for the gateway daemon).

Inside the Ubuntu terminal, enable systemd for the OpenClaw gateway service: ^[2]

sudo tee /etc/wsl.conf >/dev/null <<'EOF'
[boot]
systemd=true
EOF

Then restart WSL from PowerShell:

wsl --shutdown

Reopen the Ubuntu terminal and verify systemd is running:

systemctl --user status

Step 3: Install OpenClaw inside WSL.

You can use the same one-line installer as macOS/Linux:

curl -fsSL https://openclaw.ai/install.sh | bash

Or install manually via npm:

sudo apt update && sudo apt upgrade -y
curl -fsSL https://deb.nodesource.com/setup_22.x | sudo -E bash -
sudo apt install -y nodejs
npm install -g openclaw@latest
openclaw onboard --install-daemon

Complete the onboarding wizard with your API key, model selection, and channel setup.

Step 4: Verify and access the dashboard.

openclaw --version
openclaw gateway status
openclaw dashboard

WSL2 automatically forwards ports. Open http://localhost:18789 in your Windows browser. If the browser shows "unauthorized," copy the tokenized URL printed in the terminal output.

Alternative: Native Windows PowerShell installer

OpenClaw also provides a PowerShell installer for native Windows. ^[2] This works for basic CLI and gateway use, but WSL2 remains the recommended path for full compatibility:

iwr -useb https://openclaw.ai/install.ps1 | iex

Important: Use native Linux directories

Always work inside /home/youruser/ in WSL, not /mnt/c/Users/. Windows-mounted directories are significantly slower and cause performance issues with the OpenClaw gateway.

What Security Precautions Should You Take with OpenClaw?

OpenClaw has shell access and file permissions on your system. Treat it as a high-privilege gateway and configure security settings before connecting it to messaging platforms.

OpenClaw is a powerful tool with real system-level access. That means real security risks. Here is what to configure immediately after installation.

• Enable Consent Mode: Set exec.ask: "on" in your configuration to require approval before OpenClaw executes write or shell commands. This prevents unintended actions from web content or group chat messages.
• Keep It Updated: A critical vulnerability (CVE-2026-25253, CVSS 8.8) was disclosed in late January 2026 that allowed one-click remote code execution via authentication token exfiltration. It was patched in version 2026.1.29. ^[3] Keep OpenClaw updated to stay on the latest patched version.
• Never Expose the Gateway Publicly: Bind the gateway to loopback (127.0.0.1) only. SecurityScorecard's STRIKE team identified over 135,000 internet-facing OpenClaw instances, many with default settings and no authentication. ^[4] Use a VPN or Tailscale for remote access.
• Review Skills Before Installing: Snyk's ToxicSkills audit of 3,984 ClawHub skills found that 36% contain detectable prompt injection and confirmed 1,467 malicious payloads. ^[5] Only install skills from trusted sources and review their permissions before enabling them.
• Run Health Checks Regularly: Use openclaw doctor for automated diagnostics and openclaw logs --follow for real-time debugging.