SecretSpace for Windows 3.1.0

SecretSpace for Windows 3.1.0: the new look.

What's new

• Light and dark. The app follows Windows; Settings → Appearance chooses one.
• A typeface of its own, Manrope, and line icons the app draws itself.
• The main window has three columns: your vaults down the left (with how many entries each has, and "shared" where other people are in it), the entries, and the selected entry. Sync and Lock sit with your account at the bottom left.
• Entries, vaults and members are cards of their own, with pastel tiles.
• Nothing changes in what the app does or stores: it opens the same accounts, and going back to 3.0.0 is just installing that again.

Upgrading

• From 3.0.0: run the installer; it upgrades in place. Accounts and vaults are untouched.
• From 2.x: your 2.x vaults are not converted, changed or deleted. You create an account and Import them; the README has the steps. Back up first: copy %APPDATA%\SecretSpace (or %APPDATA%\PassMan). Sync needs the server updated to 2.0.0, which keeps serving 2.x apps. Going back: install 2.13.0 again.

Install

Download SecretSpace-Client-Installer.exe and run it. It needs Windows 10 or 11 (64-bit) and no admin rights. The installer is not code-signed, so SmartScreen may ask: More info → Run anyway.

SHA-256 checksums are in SHA256SUMS.txt.

🤖 Generated with Claude Code

SecretSpace for Windows 3.1.0-alpha.3 (test version)

SecretSpace for Windows 3.1.0-alpha.3: a test version of the new look. For real use, take the release marked Latest (3.0.0).

What's new

• Icons beside the side bar's entries, Sync, Lock, and an entry's Edit and Archive. The app draws them itself.
• Vaults window: each vault shows its tile.
• No outlined cards are left.
• The login backdrop follows Windows when it switches between light and dark.
• From alpha.1 and alpha.2: light and dark (Settings → Appearance), the Manrope typeface, the main window in three columns with your vaults down the left.
• Nothing changes in what the app does or stores.

Install

Download SecretSpace-Client-Installer.exe and run it. It needs Windows 10 or 11 (64-bit) and no admin rights. It installs over 3.0.0 and opens the same accounts.

SHA-256 checksums are in SHA256SUMS.txt.

🤖 Generated with Claude Code

SecretSpace for Windows 3.1.0-alpha.2 (test version)

SecretSpace for Windows 3.1.0-alpha.2: a test version of the new look. For real use, take the release marked Latest (3.0.0).

What's new

• The main window has three columns: your vaults down the left (with how many entries each has, and "shared" where other people are in it), the entries, and the selected entry.
• The top bar is gone. Sync and Lock sit with your account at the bottom left; Archive, Password generator, Import and Settings are above it. Search and a + for a new entry are above the list.
• Entries are cards of their own; cards have no outlines.
• The strength meter is readable in light and dark.
• From alpha.1: light and dark (Settings → Appearance), the Manrope typeface, the new colours, the rebuilt Members window.
• Nothing changes in what the app does or stores.

Install

Download SecretSpace-Client-Installer.exe and run it. It needs Windows 10 or 11 (64-bit) and no admin rights. It installs over 3.0.0 and opens the same accounts.

SHA-256 checksums are in SHA256SUMS.txt.

🤖 Generated with Claude Code

SecretSpace for Windows 3.1.0-alpha.1 (test version)

SecretSpace for Windows 3.1.0-alpha.1: a test version of the new look. For real use, take the release marked Latest (3.0.0).

What's new

• Light and dark. The app follows Windows; Settings → Appearance switches to light or dark.
• A typeface of its own: Manrope, bundled with the app.
• New colours, with pastel tiles for entries and people.
• Vaults → Members is the first window rebuilt in the new look. The other screens have the new colours and font only; their layout follows in the next test versions.
• Nothing else changes: accounts, vaults and sync work as in 3.0.0, with the same files.

Known rough spots

• The password strength meter is pale on the light theme.
• The login backdrop does not repaint if Windows switches mode while the login screen is open.

Install

Download SecretSpace-Client-Installer.exe and run it. It needs Windows 10 or 11 (64-bit) and no admin rights. It installs over 3.0.0 and opens the same accounts.

SHA-256 checksums are in SHA256SUMS.txt.

🤖 Generated with Claude Code

SecretSpace for Windows 3.0.0

SecretSpace for Windows 3.0.0: the first release of SecretSpace 3.

What's new

• Accounts instead of one vault file per user: a master password, a Secret Key (in your Emergency Kit) and a 12-word recovery phrase.
• A stronger lock: the key comes from the master password and the Secret Key through Argon2id.
• Several vaults in one account, each with its own key.
• Sync through your own server (SecretSpace Sync Server 2.0.0). Your vaults are files on your device, so they open with no network.
• Sharing a vault with other accounts on your server, as owner, editor or reader, after a fingerprint check. Removing a member gives the vault a new key.
• Who changed what: a signed record in every vault that all its members can read. It never records who viewed or copied a password.
• Recovery: Forgot your master password? opens the account with the 12-word phrase.
• Signed vault keys: a dishonest sync server cannot hand the app a key of its own.
• Entries, archive, history, 2FA codes, generator and export work as before.

Not in this release: a company setup (admin console, invites), adding someone before they have an account, moving an entry between vaults, and Sync when I unlock.

Upgrading from 2.x

• Your 2.x vaults are not converted, changed or deleted. You create an account and Import them; the README has the steps.
• Back up first: copy %APPDATA%\SecretSpace (or %APPDATA%\PassMan).
• After the upgrade the login screen is empty until you create an account: 2.x vaults are not shown there.
• Sync needs the server updated to 2.0.0. It keeps serving 2.x apps.
• Going back: install 2.13.0 again; it opens the 2.x vaults as you left them.

Install

Download SecretSpace-Client-Installer.exe and run it. It needs Windows 10 or 11 (64-bit) and no admin rights. The installer is not code-signed, so SmartScreen may ask: More info → Run anyway.

SHA-256 checksums are in SHA256SUMS.txt.

🤖 Generated with Claude Code

SecretSpace for Windows 3.0.0-alpha.8 (test version)

SecretSpace for Windows 3.0.0-alpha.8: a test version, not for real passwords yet, and a security fix for the earlier test versions. For real use, take the release marked Latest; it is not affected.

Security fix

• Who is affected: the test versions alpha.6 and alpha.7, when an account syncs with a server. Update if you tried them.
• The problem: the app took whatever vault key the server listed for it. A dishonest server, or someone who broke into it, could hand out a key of its own and read the vault the app uploaded under it at the next sync.
• The fix: every vault key is now signed by the account that made it, and the app checks the signature before it takes a key.
  • A key for a vault this device already has must be signed by your own account, by whoever signed the key it holds, or by a member whose fingerprint you compared.
  • A key with no signature, an older key put back, or a second key in place of the current one is refused. Nothing is changed and nothing of that vault is uploaded.
• Needs SecretSpace Sync Server 2.0.0-alpha.5. With an older server only the Personal vault syncs.
• Vaults made with alpha.6 / alpha.7 are signed at the next sync by a device that already holds them.

Also new

• A vault shared by someone whose fingerprint you have not compared shows them as not checked. Compare fingerprints in Members to change that.
• Remove and Change key name the members whose fingerprint was never checked on this device.
• An unencrypted http:// address of another machine asks before it is used.
• Not yet: the company setup (admin, invites) and recovery with an admin's approval.

Install

Download SecretSpace-Client-Installer.exe and run it. It needs Windows 10 or 11 (64-bit) and no admin rights. Don't install it over the 2.x release you use for real passwords: it opens SecretSpace 3 accounts only.

SHA-256 checksums are in SHA256SUMS.txt.

🤖 Generated with Claude Code

SecretSpace for Windows 3.0.0-alpha.7 (test version)

SecretSpace for Windows 3.0.0-alpha.7: a test version, not for real passwords yet. For real use, take the release marked Latest.

What's new

• Recovering an account. A forgotten master password is no longer the end.
  • Forgot your master password? on the login screen asks for the account name and your 12-word recovery phrase, then a new master password.
  • Nothing is lost: every vault and every share is still there.
  • You get a new phrase to write down. The old one stops working.
  • On a PC that does not have the account, it comes from your server, with all its vaults.
  • If the account is on a server, the server is changed first. If it can't be reached, nothing changes. Your other devices then sign in again with the new password.
  • An account on a server needs SecretSpace Sync Server 2.0.0-alpha.4.
• A new recovery phrase when you want one. Settings → Recovery phrase → New phrase… replaces a phrase that was lost or seen.
• The Secret Key. This PC keeps your Secret Key through a recovery, so your Emergency Kit stays valid. A recovery on a new PC makes a new Secret Key and shows a new kit.
• Not yet: the company setup (web admin, invites) and recovery with an admin's approval.

Install

Download SecretSpace-Client-Installer.exe and run it. It needs Windows 10 or 11 (64-bit) and no admin rights. Don't install it over the 2.x release you use for real passwords: it opens SecretSpace 3 accounts only.

SHA-256 checksums are in SHA256SUMS.txt.

🤖 Generated with Claude Code

SecretSpace for Windows 3.0.0-alpha.6 (test version)

SecretSpace for Windows 3.0.0-alpha.6: a test version, not for real passwords yet. For real use, take the release marked Latest.

What's new

• Sharing a vault with other accounts on the same server. It needs SecretSpace Sync Server 2.0.0-alpha.3.
  • In Vaults → Members an owner adds a person as owner, editor or reader.
  • Before the first share you compare fingerprints with the other person (they read theirs from their own Members window). This keeps a dishonest server from slipping in its own key.
  • Remove takes a member out and gives the vault a new key in the same step, so they can open nothing written afterwards. What they already saw they may have kept.
  • A member can leave a vault. An owner can also change the key without removing anyone.
  • A reader sees and copies entries, but cannot change them.
• Who changed what.
  • Every save adds lines to the vault's own change log, for example user1 changed the password of “Mail”. Each line is signed by its author and synced with the vault.
  • Vaults → Activity shows the log to every member and marks a line whose signature does not match its author.
  • In a shared vault, an entry and each of its earlier versions say who changed them.
  • Owners can also read the server log: uploads, members added and removed, key changes.
  • Values are never recorded, and neither is who looked at an entry or copied a password.
• Not yet: adding someone before they have an account, and the web admin for a company's server.

Install

Download SecretSpace-Client-Installer.exe and run it. It needs Windows 10 or 11 (64-bit) and no admin rights. Don't install it over the 2.x release you use for real passwords: it opens SecretSpace 3 accounts only.

SHA-256 checksums are in SHA256SUMS.txt.

🤖 Generated with Claude Code

SecretSpace for Windows 3.0.0-alpha.5 (test version)

SecretSpace for Windows 3.0.0-alpha.5: a test version, not for real passwords yet. For real use, take the release marked Latest.

What's new

• Several vaults in one account.
  • Besides the Personal vault you can make more (Home, Work, a project) in the new Vaults window, and rename or delete them there.
  • The menu above the list picks which vault is shown. All vaults shows them together, each row naming its vault, and search covers them all.
  • A new entry goes to the vault picked in the menu, or to the one you choose in the Add an entry window.
  • Every vault has its own key.
• Sync covers every vault, each with its own merge and conflict questions. It needs SecretSpace Sync Server 2.0.0-alpha.2. With an older 2.0 server only the Personal vault syncs, and the app says so.
• A vault deleted on one device is kept on the others. It is marked, no longer synced, and stays until you delete it there too or put it back.
• Deleting a vault asks for your master password and deletes on the server first. If the server can't be reached, nothing is deleted.
• Import, export, the archive and the archive-purge setting follow the vault menu.
• Not yet: moving an entry from one vault to another, and sharing a vault with other people.

Install

Download SecretSpace-Client-Installer.exe and run it. It needs Windows 10 or 11 (64-bit) and no admin rights. Don't install it over the 2.x release you use for real passwords: it opens SecretSpace 3 accounts only.

SHA-256 checksums are in SHA256SUMS.txt.

🤖 Generated with Claude Code

SecretSpace for Windows 3.0.0-alpha.4 (test version)

SecretSpace for Windows 3.0.0-alpha.4: a test version, not for real passwords yet. For real use, take the release marked Latest.

What's new

• A smoother look.
  • Rounded corners are drawn smoothed instead of in pixel steps, on every screen and dialog.
  • The sign-in screen's padlock and key are redrawn with smooth edges; the padlock has a rounded body and a keyhole.
  • An entry's coloured header has room around its letter tile.
  • The wide Add an entry button no longer shows a one-pixel step on its right edge.
• Building a long entry list takes about 7 ms more per entry; the window stays responsive while it fills.
• Otherwise the same as 3.0.0-alpha.3: accounts with a Secret Key and a recovery phrase, importing 2.x vaults, and sync through a SecretSpace Sync Server 2.0.0-alpha.1.

Install

Download SecretSpace-Client-Installer.exe and run it. It needs Windows 10 or 11 (64-bit) and no admin rights. Don't install it over the 2.x release you use for real passwords: it opens SecretSpace 3 accounts only.

SHA-256 checksums are in SHA256SUMS.txt.

🤖 Generated with Claude Code