2Secret v1.9.4

Security improvements from a review of the cryptography against a stolen
server database, a stolen device and a hostile server.

• Known keys. The apps and the command line remember the public keys of
  everyone you sealed a vault key to (sharing a vault, replacing its key,
  an emergency contact). When the server later reports other keys for that
  person, nothing is sent to them and the app shows both fingerprints; you
  can trust the new keys after comparing them (2secret account trust-keys
  on the command line). Until now a server could put its own keys in
  someone's place, for an emergency contact even without you doing
  anything.
• Replaced vault keys. A vault key that the server offers sealed to
  your public key for a vault without other members is refused: only your
  own devices could replace that key, and they do so with your account
  key. Every replaced or refused key is mentioned after the sync.
• Mac: the Touch ID key is in the protected keychain. The key that
  unlocks 2Secret with Touch ID was in the login keychain, which has no
  Touch ID protection of its own, so a copy of the Mac's disk opened with
  the login password alone. It is now a keychain item that the Secure
  Enclave releases only after Touch ID with the enrolled fingers, on this
  Mac, like on the iPhone. The app moves the key on the next unlock. (On
  the iPhone the key was already protected this way; if that protection
  cannot be set up, the key is now not stored at all.)
• Server: the database keeps a hash of each share link's proof instead of
  the proof itself, so a copy of the database can neither open a link nor
  use up its views. Links made before this version keep working.
• Server: the per-address count of failed sign-ins is forgotten after its
  window, like the other limits.
• docs/SECURITY.md says more precisely what the server stores and which
  limits apply.
• Dependencies: tokio 1.54.1 (RUSTSEC-2026-0386), clipboard-win 5.4.3. The
  advisory on crypto-bigint 0.5 (RUSTSEC-2026-0387, timing variability in
  P-256 arithmetic) waits for ssh-key 0.7; P-256 only signs on the device,
  after a click or consent (see deny.toml).
• The iOS simulator check looks for the app's process directly instead of
  asking launchctl, which once took too long on a busy runner.

Downloads

File	What
2Secret_*_aarch64.dmg	macOS app for Apple silicon (M1 and newer)
2Secret_*_x64.dmg	macOS app for Intel Macs
2Secret_*_x64-setup.exe	Windows app (installs for your user and can update itself; removes an .msi version of 2Secret up to 1.7.0)
*.deb, *.rpm, *.AppImage	Linux app (x86_64)
2Secret_*_android-arm64.apk	Android app (Android 7 and newer) – allow installing from your browser when asked
2Secret_*_android-arm64.aab	Android app bundle for app stores
2secret-*-<platform>.tar.gz / .zip	2secret CLI and 2secret-server for Linux, macOS (Apple silicon and Intel) and Windows
2secret-web-*.tar.gz	Web vault – serve it with 2secret-server --web-dir
2secret-extension-*.zip	Browser extension for Chrome, Edge, Brave and Firefox (load unpacked)
SHA256SUMS, SHA256SUMS.sig	Checksums of all files, signed with 2Secret's update key (how to check)

Server image for x86_64 and ARM64 (e.g. Raspberry Pi 4/5 with a 64-bit OS):
docker pull ghcr.io/joostiphone/2secret:latest – see
self-hosting.

On macOS, drag 2Secret to Applications and open it. If macOS says it cannot
verify the app, open System Settings → Privacy & Security and click Open
Anyway (on macOS 14 and older you can also right-click the app and choose
Open).
On Windows, SmartScreen may ask you to confirm (More info → Run anyway).

FreeBSD, OpenBSD, NetBSD and iOS: build from source, see the
README.

2Secret v1.9.3

A new look on phones, and the iPhone app fills iPhone Duo.

• Phones (the iPhone and Android apps, the web vault on a phone): the
  Dashboard, Items and Watchtower are in a floating tab bar of glass at the
  bottom of the screen, with a search button beside it, in the style of
  Liquid Glass in iOS 26. The buttons at the top are glass too, and the
  content scrolls on under the tab bar, the status bar and the Dynamic
  Island, which blur it softly. The other sections stay in the menu.
• iPhone: the status bar is light or dark with the app's theme, also when
  the iPhone's own setting differs, and dialogs stay clear of the Dynamic
  Island and the home indicator.
• Menus on items and vaults: a long press (phones, tablets) or a right
  click (computers) on an item gives its menu: copy the username, password
  or one-time password, favorite, edit, rename, move, duplicate, share via
  link, select, move to the trash. A vault in the menu has one too: a new
  item in it, edit, share, delete or leave.
• Several items at once: select items (the select button above the
  list, Select in an item's menu, or Ctrl/Cmd+click) to favorite, move
  or trash them together, or in the trash to restore or delete them.
• Search shows your favorites first, then the items with the words in
  their title (the apps, Quick Access and 2secret list).
• The menu's categories, vaults and tags fold away with a tap on their
  heading; tags start folded.
• Website icons: Fetch for all logins goes on when you leave Settings and
  shows how far it is. It asks several websites at a time, each once for
  all its logins, tries the main domain for a login on a subdomain, takes
  sharper icons and scales down those over 24 KB instead of skipping them.
• iPhone Duo: 2Secret fills the whole screen, open and closed. Until
  now iPhone Duo showed it at the size of a regular iPhone. Open, the list
  and the item show side by side with the fold between them.
• The iPhone and iPad app is built with Xcode 27.1 and starts with the
  scene life cycle that iOS 27 asks of apps.

Downloads

File	What
2Secret_*_aarch64.dmg	macOS app for Apple silicon (M1 and newer)
2Secret_*_x64.dmg	macOS app for Intel Macs
2Secret_*_x64-setup.exe	Windows app (installs for your user and can update itself; removes an .msi version of 2Secret up to 1.7.0)
*.deb, *.rpm, *.AppImage	Linux app (x86_64)
2Secret_*_android-arm64.apk	Android app (Android 7 and newer) – allow installing from your browser when asked
2Secret_*_android-arm64.aab	Android app bundle for app stores
2secret-*-<platform>.tar.gz / .zip	2secret CLI and 2secret-server for Linux, macOS (Apple silicon and Intel) and Windows
2secret-web-*.tar.gz	Web vault – serve it with 2secret-server --web-dir
2secret-extension-*.zip	Browser extension for Chrome, Edge, Brave and Firefox (load unpacked)
SHA256SUMS, SHA256SUMS.sig	Checksums of all files, signed with 2Secret's update key (how to check)

Server image for x86_64 and ARM64 (e.g. Raspberry Pi 4/5 with a 64-bit OS):
docker pull ghcr.io/joostiphone/2secret:latest – see
self-hosting.

On macOS, drag 2Secret to Applications and open it. If macOS says it cannot
verify the app, open System Settings → Privacy & Security and click Open
Anyway (on macOS 14 and older you can also right-click the app and choose
Open).
On Windows, SmartScreen may ask you to confirm (More info → Run anyway).

FreeBSD, OpenBSD, NetBSD and iOS: build from source, see the
README.

2Secret v1.9.2

Security fixes from a review of the apps, the server and the way releases
are made.

• iPhone and iPad: the Secret Key is no longer included in iCloud and
  computer backups, so a backup never holds it next to the encrypted vault.
• AutoFill (iPhone, iPad, Mac) and the browser extension: on websites where
  everyone gets a subdomain of their own (such as github.io), a login is
  only offered on its own site, never on someone else's.
• The apps connect to a sync server only over https:// (plain http://
  only to a server on the same device).
• A vault never goes back to a key it had before, so a server cannot give a
  removed member access to new items again.
• Copied passwords stay out of Windows' clipboard history and cloud
  clipboard, and out of clipboard managers on Linux and macOS.
• Website icons are fetched from public websites only, also when an address
  is an IP address written in a short form.
• The server checks the encrypted data it stores, so one account cannot
  disrupt syncing for others, limits sign-in attempts and password checks
  per address, and removes invisible characters from names.
• Updated libraries: rustls, the import of zip and XML files, and SQLite
  3.53.2 in the server.
• Every release's SHA256SUMS is signed (SHA256SUMS.sig), so downloads
  that do not update themselves can be checked: see Checking a download
  in docs/UPDATES.md.

For people who run their own server:

• The invite codes of the examples (change-me…) no longer let anyone sign
  up: choose your own.
• install.sh reads the client's address from CF-Connecting-IP only with
  a Cloudflare Tunnel; set --ip-header for another proxy.

Downloads

File	What
2Secret_*_aarch64.dmg	macOS app for Apple silicon (M1 and newer)
2Secret_*_x64.dmg	macOS app for Intel Macs
2Secret_*_x64-setup.exe	Windows app (installs for your user and can update itself; removes an .msi version of 2Secret up to 1.7.0)
*.deb, *.rpm, *.AppImage	Linux app (x86_64)
2Secret_*_android-arm64.apk	Android app (Android 7 and newer) – allow installing from your browser when asked
2Secret_*_android-arm64.aab	Android app bundle for app stores
2secret-*-<platform>.tar.gz / .zip	2secret CLI and 2secret-server for Linux, macOS (Apple silicon and Intel) and Windows
2secret-web-*.tar.gz	Web vault – serve it with 2secret-server --web-dir
2secret-extension-*.zip	Browser extension for Chrome, Edge, Brave and Firefox (load unpacked)
SHA256SUMS, SHA256SUMS.sig	Checksums of all files, signed with 2Secret's update key (how to check)

Server image for x86_64 and ARM64 (e.g. Raspberry Pi 4/5 with a 64-bit OS):
docker pull ghcr.io/joostiphone/2secret:latest – see
self-hosting.

On macOS, drag 2Secret to Applications and open it. If macOS says it cannot
verify the app, open System Settings → Privacy & Security and click Open
Anyway (on macOS 14 and older you can also right-click the app and choose
Open).
On Windows, SmartScreen may ask you to confirm (More info → Run anyway).

FreeBSD, OpenBSD, NetBSD and iOS: build from source, see the
README.

2Secret v1.9.1

• Foldables and medium screens (the inner display of iPhone Duo, tablets
  in portrait, small windows): the list and the item show side by side, at
  equal widths so the fold falls between them; on a foldable that reports its
  fold, the split is right at the fold. The menu opens next to the list.
• iPhone and iPad: the app keeps clear of the status bar, camera and home
  indicator on every side, also in landscape.
• Phones and tablets: the menu, buttons and other things you tap are at least
  44 points high, so they are easy to hit with a finger.

Downloads

File	What
2Secret_*_aarch64.dmg	macOS app for Apple silicon (M1 and newer)
2Secret_*_x64.dmg	macOS app for Intel Macs
2Secret_*_x64-setup.exe	Windows app (installs for your user and can update itself; removes an .msi version of 2Secret up to 1.7.0)
*.deb, *.rpm, *.AppImage	Linux app (x86_64)
2Secret_*_android-arm64.apk	Android app (Android 7 and newer) – allow installing from your browser when asked
2Secret_*_android-arm64.aab	Android app bundle for app stores
2secret-*-<platform>.tar.gz / .zip	2secret CLI and 2secret-server for Linux, macOS (Apple silicon and Intel) and Windows
2secret-web-*.tar.gz	Web vault – serve it with 2secret-server --web-dir
2secret-extension-*.zip	Browser extension for Chrome, Edge, Brave and Firefox (load unpacked)
SHA256SUMS	Checksums of all files

Server image for x86_64 and ARM64 (e.g. Raspberry Pi 4/5 with a 64-bit OS):
docker pull ghcr.io/joostiphone/2secret:latest – see
self-hosting.

On macOS, drag 2Secret to Applications and open it. If macOS says it cannot
verify the app, open System Settings → Privacy & Security and click Open
Anyway (on macOS 14 and older you can also right-click the app and choose
Open).
On Windows, SmartScreen may ask you to confirm (More info → Run anyway).

FreeBSD, OpenBSD, NetBSD and iOS: build from source, see the
README.

2Secret v1.9.0

• Quick Access on the desktop: press Ctrl+Shift+Space (⇧⌘Space on the
  Mac) anywhere to find an item and copy its password (Enter), user name
  (Shift+Enter) or one-time code (Ctrl/⌘+Enter) without opening 2Secret;
  Alt/⌥+Enter shows the item in 2Secret. It is also in the menu of the icon
  in the menu bar or system tray. Under Wayland, where apps cannot register a
  shortcut, set one in the desktop's settings that runs 2-secret --quick-access. Settings → Desktop app turns it off.
• Start at login (Settings → Desktop app): 2Secret starts in the menu
  bar or system tray when you log in, without its window.
• Linux: what 2Secret copies stays on the clipboard also without a
  clipboard manager (until it is cleared after the time you chose).
• Settings → Desktop app holds the icon, starting at login and Quick
  Access.
• Scan a QR code from the screen (desktop): Scan QR code in the item
  editor sets up a one-time password from the QR code a website shows for
  two-step verification, and fills in the title and user name of a new item.
  2Secret hides its window for a moment and reads the screens; the
  screenshot never leaves memory. macOS asks once for permission to record
  the screen, Wayland desktops may ask too.
• SSH agent (desktop, Settings → Desktop app): ssh, git and other
  programs log in and sign with the keys of SSH Key items (Ed25519, ECDSA,
  RSA; also passphrase-protected OpenSSH keys and RSA keys in PEM). 2Secret
  asks every time, naming the program and the key, or once per key until it
  locks; the private keys never leave 2Secret. On macOS and Linux point
  IdentityAgent in ~/.ssh/config at the socket shown in the settings; on
  Windows it is the agent of the OpenSSH client of Windows (stop the
  OpenSSH Authentication Agent service).
• Share via link (all apps and 2secret share): share an item, or the
  fields of it you pick, with someone without 2Secret. They open the link in
  any browser; it is end-to-end encrypted with a key that only the link
  holds, works for 1 hour to 30 days, can be limited to 1, 3 or 10 views and
  can ask for a password you send another way. Settings → Sync lists your
  links and revokes them (2secret shares). Needs a sync server with this
  version.
• Emergency access (all apps, 2secret emergency): trust people on the
  same server with read access to the vaults you own, for when you cannot
  give it yourself. They ask for it and get it after the waiting period you
  chose (1 to 30 days in the apps) unless you deny it; you can also approve
  at once. Your apps show the request. Ending the access gives the vaults new
  keys. Needs a sync server with this version.
• CLI: a password prompt no longer asks again forever when there is no input
  left.
• Desktop: while its window is hidden in the menu bar or system tray, 2Secret
  no longer pauses at its next screen update (the window draws nothing
  then), so Quick Access, syncing and locking keep working.

Downloads

File	What
2Secret_*_aarch64.dmg	macOS app for Apple silicon (M1 and newer)
2Secret_*_x64.dmg	macOS app for Intel Macs
2Secret_*_x64-setup.exe	Windows app (installs for your user and can update itself; removes an .msi version of 2Secret up to 1.7.0)
*.deb, *.rpm, *.AppImage	Linux app (x86_64)
2Secret_*_android-arm64.apk	Android app (Android 7 and newer) – allow installing from your browser when asked
2Secret_*_android-arm64.aab	Android app bundle for app stores
2secret-*-<platform>.tar.gz / .zip	2secret CLI and 2secret-server for Linux, macOS (Apple silicon and Intel) and Windows
2secret-web-*.tar.gz	Web vault – serve it with 2secret-server --web-dir
2secret-extension-*.zip	Browser extension for Chrome, Edge, Brave and Firefox (load unpacked)
SHA256SUMS	Checksums of all files

Server image for x86_64 and ARM64 (e.g. Raspberry Pi 4/5 with a 64-bit OS):
docker pull ghcr.io/joostiphone/2secret:latest – see
self-hosting.

On macOS, drag 2Secret to Applications and open it. If macOS says it cannot
verify the app, open System Settings → Privacy & Security and click Open
Anyway (on macOS 14 and older you can also right-click the app and choose
Open).
On Windows, SmartScreen may ask you to confirm (More info → Run anyway).

FreeBSD, OpenBSD, NetBSD and iOS: build from source, see the
README.

2Secret v1.8.0

• 2Secret has an icon in the menu bar (macOS) or the system tray (Windows,
  Linux). Its menu opens 2Secret, locks the vault or quits; on Windows a click
  on the icon opens 2Secret too. Closing the window keeps 2Secret running
  there, and it still locks after the auto-lock time. Settings → Appearance
  turns the icon off, and closing the window then quits 2Secret as before.
  Linux shows the icon through AppIndicator (on GNOME the AppIndicator
  extension); the .deb and .rpm now install its library.
• Starting 2Secret while it already runs brings its window to the front
  instead of opening a second 2Secret (Windows, Linux; macOS did this
  already), also when the window is hidden in the system tray.
• A field you add to an item with the kind Password gets Generate
  password, Password rules and the strength meter too, like the item's
  own password.

Downloads

File	What
2Secret_*_aarch64.dmg	macOS app for Apple silicon (M1 and newer)
2Secret_*_x64.dmg	macOS app for Intel Macs
2Secret_*_x64-setup.exe	Windows app (installs for your user and can update itself; removes an .msi version of 2Secret up to 1.7.0)
*.deb, *.rpm, *.AppImage	Linux app (x86_64)
2Secret_*_android-arm64.apk	Android app (Android 7 and newer) – allow installing from your browser when asked
2Secret_*_android-arm64.aab	Android app bundle for app stores
2secret-*-<platform>.tar.gz / .zip	2secret CLI and 2secret-server for Linux, macOS (Apple silicon and Intel) and Windows
2secret-web-*.tar.gz	Web vault – serve it with 2secret-server --web-dir
2secret-extension-*.zip	Browser extension for Chrome, Edge, Brave and Firefox (load unpacked)
SHA256SUMS	Checksums of all files

Server image for x86_64 and ARM64 (e.g. Raspberry Pi 4/5 with a 64-bit OS):
docker pull ghcr.io/joostiphone/2secret:latest – see
self-hosting.

On macOS, drag 2Secret to Applications and open it. If macOS says it cannot
verify the app, open System Settings → Privacy & Security and click Open
Anyway (on macOS 14 and older you can also right-click the app and choose
Open).
On Windows, SmartScreen may ask you to confirm (More info → Run anyway).

FreeBSD, OpenBSD, NetBSD and iOS: build from source, see the
README.

2Secret v1.7.1

• Windows: 2Secret comes as one setup (2Secret_<version>_x64-setup.exe)
  from now on, no longer also as an .msi. The setup installs 2Secret for
  your user, without administrator rights, and can update itself. The .msi
  installed 2Secret for everyone in Program Files, and the two did not
  replace each other, so you could end up with two copies. When the .msi
  version (up to 1.7.0) is installed, the setup offers to remove it, so one
  2Secret is left; Windows asks for permission, and your vault stays where it
  is. Download under Settings → Updates in the .msi version gets this
  setup.

Downloads

File	What
2Secret_*_aarch64.dmg	macOS app for Apple silicon (M1 and newer)
2Secret_*_x64.dmg	macOS app for Intel Macs
2Secret_*_x64-setup.exe	Windows app (installs for your user and can update itself; removes an .msi version of 2Secret up to 1.7.0)
*.deb, *.rpm, *.AppImage	Linux app (x86_64)
2Secret_*_android-arm64.apk	Android app (Android 7 and newer) – allow installing from your browser when asked
2Secret_*_android-arm64.aab	Android app bundle for app stores
2secret-*-<platform>.tar.gz / .zip	2secret CLI and 2secret-server for Linux, macOS (Apple silicon and Intel) and Windows
2secret-web-*.tar.gz	Web vault – serve it with 2secret-server --web-dir
2secret-extension-*.zip	Browser extension for Chrome, Edge, Brave and Firefox (load unpacked)
SHA256SUMS	Checksums of all files

Server image for x86_64 and ARM64 (e.g. Raspberry Pi 4/5 with a 64-bit OS):
docker pull ghcr.io/joostiphone/2secret:latest – see
self-hosting.

On macOS, drag 2Secret to Applications and open it. If macOS says it cannot
verify the app, open System Settings → Privacy & Security and click Open
Anyway (on macOS 14 and older you can also right-click the app and choose
Open).
On Windows, SmartScreen may ask you to confirm (More info → Run anyway).

FreeBSD, OpenBSD, NetBSD and iOS: build from source, see the
README.

2Secret v1.7.0

• Password rules per password: next to Generate password in the item
  editor, Password rules sets how that password is made: random,
  memorable or a PIN, its length (also exactly, from 4 to 128 characters),
  and upper case, lower case, digits, symbols and look-alike characters.
  Every change makes a new password right away. The item keeps the rules,
  encrypted and synced, so the next new password for it follows them too;
  Use as default makes them the generator's defaults. Versions before this
  one keep the password but forget its rules when they save the item.
• The password generator takes an exact length next to its slider.

Downloads

File	What
2Secret_*_aarch64.dmg	macOS app for Apple silicon (M1 and newer)
2Secret_*_x64.dmg	macOS app for Intel Macs
*.msi, *-setup.exe	Windows app
*.deb, *.rpm, *.AppImage	Linux app (x86_64)
2Secret_*_android-arm64.apk	Android app (Android 7 and newer) – allow installing from your browser when asked
2Secret_*_android-arm64.aab	Android app bundle for app stores
2secret-*-<platform>.tar.gz / .zip	2secret CLI and 2secret-server for Linux, macOS (Apple silicon and Intel) and Windows
2secret-web-*.tar.gz	Web vault – serve it with 2secret-server --web-dir
2secret-extension-*.zip	Browser extension for Chrome, Edge, Brave and Firefox (load unpacked)
SHA256SUMS	Checksums of all files

Server image for x86_64 and ARM64 (e.g. Raspberry Pi 4/5 with a 64-bit OS):
docker pull ghcr.io/joostiphone/2secret:latest – see
self-hosting.

On macOS, drag 2Secret to Applications and open it. If macOS says it cannot
verify the app, open System Settings → Privacy & Security and click Open
Anyway (on macOS 14 and older you can also right-click the app and choose
Open).
On Windows, SmartScreen may ask you to confirm (More info → Run anyway).

FreeBSD, OpenBSD, NetBSD and iOS: build from source, see the
README.

2Secret v1.6.3

• Settings → About shows where 2Secret is installed, and on Windows
  whether it is the setup for your user (which can update itself) or the
  MSI for everyone on the PC. The two install into different folders, so
  installing the MSI next to the setup leaves the setup's version as it was.

Downloads

File	What
2Secret_*_aarch64.dmg	macOS app for Apple silicon (M1 and newer)
2Secret_*_x64.dmg	macOS app for Intel Macs
*.msi, *-setup.exe	Windows app
*.deb, *.rpm, *.AppImage	Linux app (x86_64)
2Secret_*_android-arm64.apk	Android app (Android 7 and newer) – allow installing from your browser when asked
2Secret_*_android-arm64.aab	Android app bundle for app stores
2secret-*-<platform>.tar.gz / .zip	2secret CLI and 2secret-server for Linux, macOS (Apple silicon and Intel) and Windows
2secret-web-*.tar.gz	Web vault – serve it with 2secret-server --web-dir
2secret-extension-*.zip	Browser extension for Chrome, Edge, Brave and Firefox (load unpacked)
SHA256SUMS	Checksums of all files

Server image for x86_64 and ARM64 (e.g. Raspberry Pi 4/5 with a 64-bit OS):
docker pull ghcr.io/joostiphone/2secret:latest – see
self-hosting.

On macOS, drag 2Secret to Applications and open it. If macOS says it cannot
verify the app, open System Settings → Privacy & Security and click Open
Anyway (on macOS 14 and older you can also right-click the app and choose
Open).
On Windows, SmartScreen may ask you to confirm (More info → Run anyway).

FreeBSD, OpenBSD, NetBSD and iOS: build from source, see the
README.

2Secret v1.6.2

• Windows Hello: turning it on (or unlocking with it) could fail with error
  0x80098044. Windows opened its prompt behind 2Secret, and a face confirmed
  there after a few seconds no longer counted. 2Secret now brings the prompt
  to the front, and asks once more when Windows still turns it down.

Downloads

File	What
2Secret_*_aarch64.dmg	macOS app for Apple silicon (M1 and newer)
2Secret_*_x64.dmg	macOS app for Intel Macs
*.msi, *-setup.exe	Windows app
*.deb, *.rpm, *.AppImage	Linux app (x86_64)
2Secret_*_android-arm64.apk	Android app (Android 7 and newer) – allow installing from your browser when asked
2Secret_*_android-arm64.aab	Android app bundle for app stores
2secret-*-<platform>.tar.gz / .zip	2secret CLI and 2secret-server for Linux, macOS (Apple silicon and Intel) and Windows
2secret-web-*.tar.gz	Web vault – serve it with 2secret-server --web-dir
2secret-extension-*.zip	Browser extension for Chrome, Edge, Brave and Firefox (load unpacked)
SHA256SUMS	Checksums of all files

Server image for x86_64 and ARM64 (e.g. Raspberry Pi 4/5 with a 64-bit OS):
docker pull ghcr.io/joostiphone/2secret:latest – see
self-hosting.

On macOS, drag 2Secret to Applications and open it. If macOS says it cannot
verify the app, open System Settings → Privacy & Security and click Open
Anyway (on macOS 14 and older you can also right-click the app and choose
Open).
On Windows, SmartScreen may ask you to confirm (More info → Run anyway).

FreeBSD, OpenBSD, NetBSD and iOS: build from source, see the
README.