2Secret v1.12.0

Agent Access, part three: an AI agent on another computer asks your
2Secret through your sync server, and you answer on your computer or phone.

• Agents elsewhere (Settings → Agents elsewhere, desktop and phone).
  Pair an agent that does not run on your computer (Claude Code in the
  cloud, an agent on a server, a second machine) with a code 2Secret shows:
  2secret agent pair <code> there, Confirm agent here after comparing the
  fingerprint. From then on 2secret mcp --remote on that computer gives the
  AI tool the same tools as a local agent, and every question (a password,
  a one-time code, saving an item) comes to your unlocked 2Secret, on the
  desktop or the phone; the first answer counts. The sync server relays
  sealed, signed envelopes it cannot read or forge: it sees which agent
  asked when and how large the question was, never what. Revoke an agent on
  any device. Needs a server with 2Secret 1.12 (sync.2secret.app has it);
  the protocol is in docs/AGENT-PROTOCOL.md.
• Signing in from elsewhere (fill_login, 2secret agent fill): with
  the browser on the agent's computer started with
  --remote-debugging-port, 2Secret there puts the login you allowed into
  the tab that belongs to the item's website and submits it; the model never
  sees the password. Chrome, Edge, Brave and Chromium.
• Server: tables and routes for agents elsewhere, limits --max-agents and
  --max-agent-requests (TWOSECRET_MAX_AGENTS,
  TWOSECRET_MAX_AGENT_REQUESTS), signed agent header with replay
  protection, long-polls.
• Command line: 2secret agent pair, unpair, fill; 2secret mcp --remote [NAME] [--cdp …]; 2secret agent status lists pairings.

Downloads

File	What
2Secret_*_aarch64.dmg	macOS app for Apple silicon (M1 and newer)
2Secret_*_x64.dmg	macOS app for Intel Macs
2Secret_*_x64-setup.exe	Windows app (installs for your user and can update itself; removes an .msi version of 2Secret up to 1.7.0)
*.deb, *.rpm, *.AppImage	Linux app (x86_64)
2Secret_*_android-arm64.apk	Android app (Android 7 and newer) – allow installing from your browser when asked
2Secret_*_android-arm64.aab	Android app bundle for app stores
2secret-*-<platform>.tar.gz / .zip	2secret CLI and 2secret-server for Linux, macOS (Apple silicon and Intel) and Windows
2secret-web-*.tar.gz	Web vault – serve it with 2secret-server --web-dir
2secret-extension-*.zip	Browser extension for Chrome, Edge, Brave and Firefox (load unpacked)
SHA256SUMS, SHA256SUMS.sig	Checksums of all files, signed with 2Secret's update key (how to check)

Server image for x86_64 and ARM64 (e.g. Raspberry Pi 4/5 with a 64-bit OS):
docker pull ghcr.io/joostiphone/2secret:latest – see
self-hosting.

On macOS, drag 2Secret to Applications and open it. If macOS says it cannot
verify the app, open System Settings → Privacy & Security and click Open
Anyway (on macOS 14 and older you can also right-click the app and choose
Open).
On Windows, SmartScreen may ask you to confirm (More info → Run anyway).

FreeBSD, OpenBSD, NetBSD and iOS: build from source, see the
README.