SilentSilo 1.0.0

The first public release of SilentSilo: a local-first, end-to-end encrypted vault for files and passwords.

A silo is a portable encrypted folder. It unlocks with a FIDO2 security key or Windows Hello, and a recovery code you write down is the only fallback. There is no passphrase and no account. Backup and sync are optional and go to storage you control: any S3-compatible bucket, WebDAV, SFTP or a plain folder. The provider only ever sees ciphertext.

What is in this release is listed in CHANGELOG.md. What is not yet there is listed just as plainly in BACKLOG.md.

Install

Windows 10 or later, 64-bit: SilentSilo_1.0.0_x64-setup.exe

It installs for the current user, so it needs no administrator rights. The installer is signed by SOFTWARE HIVE S.R.L.

You will need a FIDO2 security key, or a machine with Windows Hello, before you can create a silo.

Reading a backup without the app

silentsilo-extract rebuilds files from a silo's backup storage using the recovery code, with no interface and nothing to install. It exists so the data outlives the project. The format it reads is written out in FORMATS.md.

Platform	File
Windows	silentsilo-extract-windows-x86_64.exe
Linux	silentsilo-extract-linux-x86_64
macOS, Apple silicon	silentsilo-extract-macos-aarch64

Checking what you downloaded

Every file above has a .sig next to it: a minisign signature over the bytes as they ship. It is the same key the app checks updates against, so you can verify a download without trusting GitHub.

minisign -Vm SilentSilo_1.0.0_x64-setup.exe -P RWS3eVy3IDLlean9BrZWUaxbTyj+oKfoc4g+IJ6xaAhUwbV8v8WnDbZP

latest.json is what the in-app updater reads. It is published here for reference.

Licence

AGPL-3.0-or-later. The source is this repository. Third-party components and their licences are listed in THIRD-PARTY-NOTICES.txt, installed alongside the application.