SecretSpace for Windows 3.0.0

SecretSpace for Windows 3.0.0: the first release of SecretSpace 3.

What's new

• Accounts instead of one vault file per user: a master password, a Secret Key (in your Emergency Kit) and a 12-word recovery phrase.
• A stronger lock: the key comes from the master password and the Secret Key through Argon2id.
• Several vaults in one account, each with its own key.
• Sync through your own server (SecretSpace Sync Server 2.0.0). Your vaults are files on your device, so they open with no network.
• Sharing a vault with other accounts on your server, as owner, editor or reader, after a fingerprint check. Removing a member gives the vault a new key.
• Who changed what: a signed record in every vault that all its members can read. It never records who viewed or copied a password.
• Recovery: Forgot your master password? opens the account with the 12-word phrase.
• Signed vault keys: a dishonest sync server cannot hand the app a key of its own.
• Entries, archive, history, 2FA codes, generator and export work as before.

Not in this release: a company setup (admin console, invites), adding someone before they have an account, moving an entry between vaults, and Sync when I unlock.

Upgrading from 2.x

• Your 2.x vaults are not converted, changed or deleted. You create an account and Import them; the README has the steps.
• Back up first: copy %APPDATA%\SecretSpace (or %APPDATA%\PassMan).
• After the upgrade the login screen is empty until you create an account: 2.x vaults are not shown there.
• Sync needs the server updated to 2.0.0. It keeps serving 2.x apps.
• Going back: install 2.13.0 again; it opens the 2.x vaults as you left them.

Install

Download SecretSpace-Client-Installer.exe and run it. It needs Windows 10 or 11 (64-bit) and no admin rights. The installer is not code-signed, so SmartScreen may ask: More info → Run anyway.

SHA-256 checksums are in SHA256SUMS.txt.

🤖 Generated with Claude Code