2Secret 1.9.0

• Quick Access on the desktop: press Ctrl+Shift+Space (⇧⌘Space on the Mac) anywhere to find an item and copy its password (Enter), user name (Shift+Enter) or one-time code (Ctrl/⌘+Enter) without opening 2Secret; Alt/⌥+Enter shows the item in 2Secret. It is also in the menu of the icon in the menu bar or system tray. Under Wayland, where apps cannot register a shortcut, set one in the desktop's settings that runs 2-secret --quick-access. Settings → Desktop app turns it off.
• Start at login (Settings → Desktop app): 2Secret starts in the menu bar or system tray when you log in, without its window.
• Linux: what 2Secret copies stays on the clipboard also without a clipboard manager (until it is cleared after the time you chose).
• Settings → Desktop app holds the icon, starting at login and Quick Access.
• Scan a QR code from the screen (desktop): Scan QR code in the item editor sets up a one-time password from the QR code a website shows for two-step verification, and fills in the title and user name of a new item. 2Secret hides its window for a moment and reads the screens; the screenshot never leaves memory. macOS asks once for permission to record the screen, Wayland desktops may ask too.
• SSH agent (desktop, Settings → Desktop app): ssh, git and other programs log in and sign with the keys of SSH Key items (Ed25519, ECDSA, RSA; also passphrase-protected OpenSSH keys and RSA keys in PEM). 2Secret asks every time, naming the program and the key, or once per key until it locks; the private keys never leave 2Secret. On macOS and Linux point IdentityAgent in ~/.ssh/config at the socket shown in the settings; on Windows it is the agent of the OpenSSH client of Windows (stop the OpenSSH Authentication Agent service).
• Share via link (all apps and 2secret share): share an item, or the fields of it you pick, with someone without 2Secret. They open the link in any browser; it is end-to-end encrypted with a key that only the link holds, works for 1 hour to 30 days, can be limited to 1, 3 or 10 views and can ask for a password you send another way. Settings → Sync lists your links and revokes them (2secret shares). Needs a sync server with this version.
• Emergency access (all apps, 2secret emergency): trust people on the same server with read access to the vaults you own, for when you cannot give it yourself. They ask for it and get it after the waiting period you chose (1 to 30 days in the apps) unless you deny it; you can also approve at once. Your apps show the request. Ending the access gives the vaults new keys. Needs a sync server with this version.
• CLI: a password prompt no longer asks again forever when there is no input left.
• Desktop: while its window is hidden in the menu bar or system tray, 2Secret no longer pauses at its next screen update (the window draws nothing then), so Quick Access, syncing and locking keep working.

Downloads#

Server image for x86_64 and ARM64 (e.g. Raspberry Pi 4/5 with a 64-bit OS): docker pull ghcr.io/joostiphone/2secret:latest – see self-hosting.

On macOS, drag 2Secret to Applications and open it. If macOS says it cannot verify the app, open System Settings → Privacy & Security and click Open Anyway (on macOS 14 and older you can also right-click the app and choose Open). On Windows, SmartScreen may ask you to confirm (More info → Run anyway).

FreeBSD, OpenBSD, NetBSD and iOS: build from source, see the README.