2Secret v1.11.0

Agent Access, part two: an AI agent in your browser gets signed in by
2Secret, without ever seeing the password.

• Sign in for an agent (fill_login). An AI agent that works in your
  browser (Claude for Chrome, Perplexity Comet, ChatGPT Atlas, a browser
  driven by Playwright or Browser Use) asks 2Secret to sign in with an item
  on the page it has open. 2Secret asks you ("Claude wants to sign in to
  github.com with “GitHub” in Chrome"), with the same choices as for other
  requests and the optional Touch ID, Face ID or Windows Hello question.
  After Allow the browser extension fills the sign-in page that is the
  active tab (only a tab that belongs to the item's website, never one the
  agent names) and submits it. The agent only hears that it was filled, or
  why not. Logged as fill in the browser.
• Browser connection (Settings → Desktop app → Browser connection):
  one button sets the extension up to talk to the app in Chrome, Chromium,
  Brave, Microsoft Edge, Vivaldi, Arc and Firefox on macOS, Windows and
  Linux. 2Secret itself is the browser's native messaging host; the app
  only accepts that connection from its own program, and the browser can do
  nothing but wait for the logins you allow. The connected browsers are
  listed with the agents and can be revoked there.
• Browser extension 1.11: connects to the app when it is set up
  (permissions nativeMessaging and alarms), one copy of the fill code for
  the popup and the background, and a fixed id for the store and unpacked
  builds alike. The Fill button is unchanged and still never submits.
• Command line: 2secret agent status also shows which browsers are set up;
  agent_status lists the connected browsers.
• Windows: the app no longer builds as a console program.
• Documentation: Filling a login in your browser in docs/AGENTS.md,
  docs/EXTENSION.md (building, ids, publishing in the stores),
  docs/SECURITY.md.

Downloads

File	What
2Secret_*_aarch64.dmg	macOS app for Apple silicon (M1 and newer)
2Secret_*_x64.dmg	macOS app for Intel Macs
2Secret_*_x64-setup.exe	Windows app (installs for your user and can update itself; removes an .msi version of 2Secret up to 1.7.0)
*.deb, *.rpm, *.AppImage	Linux app (x86_64)
2Secret_*_android-arm64.apk	Android app (Android 7 and newer) – allow installing from your browser when asked
2Secret_*_android-arm64.aab	Android app bundle for app stores
2secret-*-<platform>.tar.gz / .zip	2secret CLI and 2secret-server for Linux, macOS (Apple silicon and Intel) and Windows
2secret-web-*.tar.gz	Web vault – serve it with 2secret-server --web-dir
2secret-extension-*.zip	Browser extension for Chrome, Edge, Brave and Firefox (load unpacked)
SHA256SUMS, SHA256SUMS.sig	Checksums of all files, signed with 2Secret's update key (how to check)

Server image for x86_64 and ARM64 (e.g. Raspberry Pi 4/5 with a 64-bit OS):
docker pull ghcr.io/joostiphone/2secret:latest – see
self-hosting.

On macOS, drag 2Secret to Applications and open it. If macOS says it cannot
verify the app, open System Settings → Privacy & Security and click Open
Anyway (on macOS 14 and older you can also right-click the app and choose
Open).
On Windows, SmartScreen may ask you to confirm (More info → Run anyway).

FreeBSD, OpenBSD, NetBSD and iOS: build from source, see the
README.