Repository navigation
2Secret v1.9.0
·
30 commits
to claude/busy-rubin-4vamfu
since this release
- Quick Access on the desktop: press Ctrl+Shift+Space (⇧⌘Space on the
Mac) anywhere to find an item and copy its password (Enter), user name
(Shift+Enter) or one-time code (Ctrl/⌘+Enter) without opening 2Secret;
Alt/⌥+Enter shows the item in 2Secret. It is also in the menu of the icon
in the menu bar or system tray. Under Wayland, where apps cannot register a
shortcut, set one in the desktop's settings that runs2-secret --quick-access. Settings → Desktop app turns it off. - Start at login (Settings → Desktop app): 2Secret starts in the menu
bar or system tray when you log in, without its window. - Linux: what 2Secret copies stays on the clipboard also without a
clipboard manager (until it is cleared after the time you chose). - Settings → Desktop app holds the icon, starting at login and Quick
Access. - Scan a QR code from the screen (desktop): Scan QR code in the item
editor sets up a one-time password from the QR code a website shows for
two-step verification, and fills in the title and user name of a new item.
2Secret hides its window for a moment and reads the screens; the
screenshot never leaves memory. macOS asks once for permission to record
the screen, Wayland desktops may ask too. - SSH agent (desktop, Settings → Desktop app):
ssh,gitand other
programs log in and sign with the keys of SSH Key items (Ed25519, ECDSA,
RSA; also passphrase-protected OpenSSH keys and RSA keys in PEM). 2Secret
asks every time, naming the program and the key, or once per key until it
locks; the private keys never leave 2Secret. On macOS and Linux point
IdentityAgentin~/.ssh/configat the socket shown in the settings; on
Windows it is the agent of the OpenSSH client of Windows (stop the
OpenSSH Authentication Agent service). - Share via link (all apps and
2secret share): share an item, or the
fields of it you pick, with someone without 2Secret. They open the link in
any browser; it is end-to-end encrypted with a key that only the link
holds, works for 1 hour to 30 days, can be limited to 1, 3 or 10 views and
can ask for a password you send another way. Settings → Sync lists your
links and revokes them (2secret shares). Needs a sync server with this
version. - Emergency access (all apps,
2secret emergency): trust people on the
same server with read access to the vaults you own, for when you cannot
give it yourself. They ask for it and get it after the waiting period you
chose (1 to 30 days in the apps) unless you deny it; you can also approve
at once. Your apps show the request. Ending the access gives the vaults new
keys. Needs a sync server with this version. - CLI: a password prompt no longer asks again forever when there is no input
left. - Desktop: while its window is hidden in the menu bar or system tray, 2Secret
no longer pauses at its next screen update (the window draws nothing
then), so Quick Access, syncing and locking keep working.
Downloads
| File | What |
|---|---|
2Secret_*_aarch64.dmg |
macOS app for Apple silicon (M1 and newer) |
2Secret_*_x64.dmg |
macOS app for Intel Macs |
2Secret_*_x64-setup.exe |
Windows app (installs for your user and can update itself; removes an .msi version of 2Secret up to 1.7.0) |
*.deb, *.rpm, *.AppImage |
Linux app (x86_64) |
2Secret_*_android-arm64.apk |
Android app (Android 7 and newer) – allow installing from your browser when asked |
2Secret_*_android-arm64.aab |
Android app bundle for app stores |
2secret-*-<platform>.tar.gz / .zip |
2secret CLI and 2secret-server for Linux, macOS (Apple silicon and Intel) and Windows |
2secret-web-*.tar.gz |
Web vault – serve it with 2secret-server --web-dir |
2secret-extension-*.zip |
Browser extension for Chrome, Edge, Brave and Firefox (load unpacked) |
SHA256SUMS |
Checksums of all files |
Server image for x86_64 and ARM64 (e.g. Raspberry Pi 4/5 with a 64-bit OS):
docker pull ghcr.io/joostiphone/2secret:latest – see
self-hosting.
On macOS, drag 2Secret to Applications and open it. If macOS says it cannot
verify the app, open System Settings → Privacy & Security and click Open
Anyway (on macOS 14 and older you can also right-click the app and choose
Open).
On Windows, SmartScreen may ask you to confirm (More info → Run anyway).
FreeBSD, OpenBSD, NetBSD and iOS: build from source, see the
README.