2Secret v1.5.0

• AutoFill on the Mac: Safari and other apps fill passwords and sign in with
  passkeys from 2Secret after Touch ID, without a browser extension, like on
  iPhone and iPad. Turn on unlocking with Touch ID in 2Secret, then 2Secret
  in System Settings → General → AutoFill & Passwords. Needs macOS 14 and a
  release signed with a Developer ID: the release workflow then adds the
  extension (macos/) with Developer ID provisioning profiles from the App
  Store Connect API, and can notarize with that API key instead of an Apple
  ID. Settings → Security says where to turn AutoFill on (also on iOS).
• The macOS app is signed with a Developer ID and notarized by Apple, so it
  opens without allowing it under Privacy & Security first (once Apple has
  notarized it: the first submissions of a new developer account can take
  Apple days, and the release no longer waits for that). macOS may ask once
  for your login password to let the new version use its keychain item for
  Touch ID unlock; choose Always Allow.
• Profiles: the apps keep up to two accounts side by side, for example your
  own and one for work on another server. Switch at the top of the sidebar
  or on the lock screen; the profile you leave stays unlocked in the
  background until the app locks, which locks both. Each profile has its own
  Secret Key and its own biometric unlock. Not in the web vault or the
  browser extension. On iOS and macOS AutoFill fills from the profile that
  last wrote its logins with biometric unlock on.
• Website icons: logins show the icon of their website. The apps fetch it
  straight from the website when you save a login (over HTTPS, public host
  names only, no icon service) and keep it encrypted with the login, so
  other devices, the web vault and the browser extension show it too.
  Settings → Appearance → Website icons turns it off and fetches icons for
  the logins you already have.
• Profile photo: Settings → Account → Add photo. The app makes a small
  square picture of it, encrypts it with your account key and syncs it to
  your other devices through the new PUT /account/avatar (servers from
  this version; with an older server it stays on the device).
• Vault icons: choose an icon when creating or editing a vault. It is part
  of the vault's encrypted details, so everyone with access sees it.
• Links in the app (an item's websites, What's new, the project page) open
  in the browser on macOS, iOS and Linux; clicking them did nothing there.
• Browser extension: a new passkey is stored before its window closes. The
  window could close first, and then the website had the passkey but 2Secret
  did not.
• Server: the limits forget client addresses and e-mail addresses as soon as
  their window has passed (a day for sign-ups, 15 minutes for failed
  sign-ins), instead of when the server restarts.
• deploy/proxmox/install.sh keeps the journal for 14 days.

Downloads

File	What
2Secret_*_aarch64.dmg	macOS app for Apple silicon (M1 and newer)
2Secret_*_x64.dmg	macOS app for Intel Macs
*.msi, *-setup.exe	Windows app
*.deb, *.rpm, *.AppImage	Linux app (x86_64)
2Secret_*_android-arm64.apk	Android app (Android 7 and newer) – allow installing from your browser when asked
2Secret_*_android-arm64.aab	Android app bundle for app stores
2secret-*-<platform>.tar.gz / .zip	2secret CLI and 2secret-server for Linux, macOS (Apple silicon and Intel) and Windows
2secret-web-*.tar.gz	Web vault – serve it with 2secret-server --web-dir
2secret-extension-*.zip	Browser extension for Chrome, Edge, Brave and Firefox (load unpacked)
SHA256SUMS	Checksums of all files

Server image for x86_64 and ARM64 (e.g. Raspberry Pi 4/5 with a 64-bit OS):
docker pull ghcr.io/joostiphone/2secret:latest – see
self-hosting.

On macOS, drag 2Secret to Applications and open it. If macOS says it cannot
verify the app, open System Settings → Privacy & Security and click Open
Anyway (on macOS 14 and older you can also right-click the app and choose
Open).
On Windows, SmartScreen may ask you to confirm (More info → Run anyway).

FreeBSD, OpenBSD, NetBSD and iOS: build from source, see the
README.