Skip to content

v0.1.0 - Initial Release

Pre-release
Pre-release

Choose a tag to compare

View all tags
@dan-build dan-build released this 12 Jun 16:01
· 74 commits to main since this release
v0.1.0
905ea18
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Still v0.1.0 (pre-release)

First public release of Still, an offline password and secret manager for your Mac. No account, no sync, no telemetry: Still never connects to the internet.

Early pre-release. Please read the known issues below before storing anything you can't afford to lose.

Features

  • One master password unlocks everything. The key is derived with Argon2id at libsodium's highest-cost setting.
  • Lenses: separate collections, each with its own encryption key.
  • Passwords, API keys or tokens, and secure notes. Reveal, copy or delete them.
  • Archive: a forgotten Lens is kept for 7 days, and can be restored or deleted for good.
  • Offline: no servers, accounts or analytics.

What's encrypted

  • Encrypted at rest: every secret value, using XChaCha20-Poly1305 via libsodium, with keys protected by your master password.
  • Not encrypted yet: Lens names, secret labels and types, dates, and item counts. See SECURITY.md.

Known issues (fixes planned for v0.1.1)

  • Forgetting your only Lens isn't saved. It comes back after a restart. Keep at least one other Lens.
  • Changes to the last item in the Archive aren't saved. "Delete forever" and "Restore" on the only archived Lens, and the 7-day clean-up when it empties the Archive, are undone after a restart.
  • Spaces and line breaks at the start or end of a secret are removed when you save it.
  • The optional PIN does nothing. "Use PIN instead" can never unlock; use your master password.
  • A master password made only of spaces can be created but not entered.
  • In rare cases (damaged data or a partly missing vault), a Lens that can't be read is hidden without warning, and erased by your next change.
  • Unlocking freezes the window for a few seconds, and every failure shows as "Incorrect password or PIN".

Install (macOS)

  1. Download Still-0.1.0.dmg. Optionally, check it with shasum -a 256 Still-0.1.0.dmg. It should print:
    1ae0e529676abf693350aa85be51c6307e06a88de121a9853bf1155e90453827
  2. Open the .dmg and drag Still into Applications.
  3. The app isn't signed yet, so macOS blocks the first launch. Go to System Settings → Privacy & Security and click Open Anyway.

This build is for Intel Macs, and runs on Apple Silicon through Rosetta 2. v0.1.1 is planned as a universal build.

Built with Tauri v2, Next.js and libsodium.

Assets 3
Loading