October 12, 2026
2Secret 1.0.0
First release of 2Secret.
First release of 2Secret.
- Two-Secret Key Derivation (Argon2id + Secret Key), XChaCha20-Poly1305 encryption, X25519 vault sharing.
- Apps for macOS, Windows, Linux, the BSDs, iOS and the web from one Rust codebase, in English and Dutch.
- Browser extension for Chrome, Edge, Brave and Firefox with autofill.
2secretCLI with secret references (2s://),runandinject.- Self-hostable zero-knowledge sync server with invite-only sign-ups.
- 19 item types, custom fields, attachments, tags, favorites, trash, password history.
- TOTP one-time passwords, password generator, Ed25519 SSH key generation, Watchtower with Have I Been Pwned breach check.
- Import from 1Password, Bitwarden, LastPass, Chrome, Firefox, Safari, KeePass, KeePassXC and Dashlane; encrypted and plain exports.
Downloads
| File | What |
|---|---|
*.dmg |
macOS app (Apple silicon) |
*.msi, *-setup.exe |
Windows app |
*.deb, *.rpm, *.AppImage |
Linux app (x86_64) |
2secret-*-<platform>.tar.gz / .zip |
2secret CLI and 2secret-server for Linux, macOS (Apple silicon and Intel) and Windows |
2secret-web-*.tar.gz |
Web vault – serve it with 2secret-server --web-dir |
2secret-extension-*.zip |
Browser extension for Chrome, Edge, Brave and Firefox (load unpacked) |
SHA256SUMS |
Checksums of all files |
Server image: docker pull ghcr.io/joostiphone/2secret:latest – see
self-hosting.
The apps are not code-signed yet. On macOS, open the app the first time with right-click → Open (or System Settings → Privacy & Security → Open Anyway). On Windows, SmartScreen may ask you to confirm (More info → Run anyway).
FreeBSD, OpenBSD, NetBSD and iOS: build from source, see the README.