Skip to content

2Secret v1.9.0

Choose a tag to compare

@github-actions github-actions released this 18 Oct 17:33
· 30 commits to claude/busy-rubin-4vamfu since this release
a38506c
  • Quick Access on the desktop: press Ctrl+Shift+Space (⇧⌘Space on the
    Mac) anywhere to find an item and copy its password (Enter), user name
    (Shift+Enter) or one-time code (Ctrl/⌘+Enter) without opening 2Secret;
    Alt/⌥+Enter shows the item in 2Secret. It is also in the menu of the icon
    in the menu bar or system tray. Under Wayland, where apps cannot register a
    shortcut, set one in the desktop's settings that runs 2-secret --quick-access. Settings → Desktop app turns it off.
  • Start at login (Settings → Desktop app): 2Secret starts in the menu
    bar or system tray when you log in, without its window.
  • Linux: what 2Secret copies stays on the clipboard also without a
    clipboard manager (until it is cleared after the time you chose).
  • Settings → Desktop app holds the icon, starting at login and Quick
    Access.
  • Scan a QR code from the screen (desktop): Scan QR code in the item
    editor sets up a one-time password from the QR code a website shows for
    two-step verification, and fills in the title and user name of a new item.
    2Secret hides its window for a moment and reads the screens; the
    screenshot never leaves memory. macOS asks once for permission to record
    the screen, Wayland desktops may ask too.
  • SSH agent (desktop, Settings → Desktop app): ssh, git and other
    programs log in and sign with the keys of SSH Key items (Ed25519, ECDSA,
    RSA; also passphrase-protected OpenSSH keys and RSA keys in PEM). 2Secret
    asks every time, naming the program and the key, or once per key until it
    locks; the private keys never leave 2Secret. On macOS and Linux point
    IdentityAgent in ~/.ssh/config at the socket shown in the settings; on
    Windows it is the agent of the OpenSSH client of Windows (stop the
    OpenSSH Authentication Agent service).
  • Share via link (all apps and 2secret share): share an item, or the
    fields of it you pick, with someone without 2Secret. They open the link in
    any browser; it is end-to-end encrypted with a key that only the link
    holds, works for 1 hour to 30 days, can be limited to 1, 3 or 10 views and
    can ask for a password you send another way. Settings → Sync lists your
    links and revokes them (2secret shares). Needs a sync server with this
    version.
  • Emergency access (all apps, 2secret emergency): trust people on the
    same server with read access to the vaults you own, for when you cannot
    give it yourself. They ask for it and get it after the waiting period you
    chose (1 to 30 days in the apps) unless you deny it; you can also approve
    at once. Your apps show the request. Ending the access gives the vaults new
    keys. Needs a sync server with this version.
  • CLI: a password prompt no longer asks again forever when there is no input
    left.
  • Desktop: while its window is hidden in the menu bar or system tray, 2Secret
    no longer pauses at its next screen update (the window draws nothing
    then), so Quick Access, syncing and locking keep working.

Downloads

File What
2Secret_*_aarch64.dmg macOS app for Apple silicon (M1 and newer)
2Secret_*_x64.dmg macOS app for Intel Macs
2Secret_*_x64-setup.exe Windows app (installs for your user and can update itself; removes an .msi version of 2Secret up to 1.7.0)
*.deb, *.rpm, *.AppImage Linux app (x86_64)
2Secret_*_android-arm64.apk Android app (Android 7 and newer) – allow installing from your browser when asked
2Secret_*_android-arm64.aab Android app bundle for app stores
2secret-*-<platform>.tar.gz / .zip 2secret CLI and 2secret-server for Linux, macOS (Apple silicon and Intel) and Windows
2secret-web-*.tar.gz Web vault – serve it with 2secret-server --web-dir
2secret-extension-*.zip Browser extension for Chrome, Edge, Brave and Firefox (load unpacked)
SHA256SUMS Checksums of all files

Server image for x86_64 and ARM64 (e.g. Raspberry Pi 4/5 with a 64-bit OS):
docker pull ghcr.io/joostiphone/2secret:latest – see
self-hosting.

On macOS, drag 2Secret to Applications and open it. If macOS says it cannot
verify the app, open System Settings → Privacy & Security and click Open
Anyway
(on macOS 14 and older you can also right-click the app and choose
Open).
On Windows, SmartScreen may ask you to confirm (More info → Run anyway).

FreeBSD, OpenBSD, NetBSD and iOS: build from source, see the
README.