2Secret 1.2.0

iOS AutoFill: fill passwords and sign in with passkeys in Safari and apps, after Face ID or Touch ID (needs Unlock with Face ID in the app).
The iOS app can be published on the App Store: an Xcode project with the AutoFill extension (ios/), store texts and screenshots in English and Dutch, and automatic uploads to TestFlight (see docs/APP-STORE.md).
Android app (Android 7 and newer), attached to releases as a signed .apk and an .aab for app stores. Its data stays out of Android's cloud backups.
Passkeys: the browser extension offers to save new passkeys in 2Secret and signs in with them; you can always choose another device or security key instead. Passkeys are end-to-end encrypted and sync with the vault, and can be imported from Bitwarden. Firefox 128 or newer is needed.
Unlock with Touch ID (macOS), Face ID or Touch ID (iOS) and Windows Hello (Settings → Security). The master password is still needed every 14 days.
Removing someone from a shared vault gives the vault a new key: everything is re-encrypted, so what is added or changed afterwards is unreadable with the key they had. Managers can also replace a vault's key themselves (Share → Replace vault key, 2secret vault rotate-key).
New items without a chosen vault go to your personal vault, never to a vault that is shared with others.
Fresh screenshots in English and Dutch (scripts/screenshots.sh).

Downloads

File	What
`2Secret_*_aarch64.dmg`	macOS app for Apple silicon (M1 and newer)
`2Secret_*_x64.dmg`	macOS app for Intel Macs
`.msi`, `-setup.exe`	Windows app
`.deb`, `.rpm`, `*.AppImage`	Linux app (x86_64)
`2Secret_*_android-arm64.apk`	Android app (Android 7 and newer) – allow installing from your browser when asked
`2Secret_*_android-arm64.aab`	Android app bundle for app stores
`2secret-*-<platform>.tar.gz` / `.zip`	`2secret` CLI and `2secret-server` for Linux, macOS (Apple silicon and Intel) and Windows
`2secret-web-*.tar.gz`	Web vault – serve it with `2secret-server --web-dir`
`2secret-extension-*.zip`	Browser extension for Chrome, Edge, Brave and Firefox (load unpacked)
`SHA256SUMS`	Checksums of all files

Server image for x86_64 and ARM64 (e.g. Raspberry Pi 4/5 with a 64-bit OS): docker pull ghcr.io/joostiphone/2secret:latest – see self-hosting.

On macOS, drag 2Secret to Applications and open it. If macOS says it cannot verify the app, open System Settings → Privacy & Security and click Open Anyway (on macOS 14 and older you can also right-click the app and choose Open). On Windows, SmartScreen may ask you to confirm (More info → Run anyway).

FreeBSD, OpenBSD, NetBSD and iOS: build from source, see the README.

Downloads#

Downloads