iOS app is in testing phase. Please help by testing via TestFlight 🙏🏻 Join the beta here
2Secret
Donate Download
Download Donate View on GitHub

Download

Get 2Secret. It’s free.

The apps, the browser extension, the CLI and the server, straight from our GitHub releases. Pick yours below; we’ve highlighted the one we think you’re on.

Version 1.9.3 Released October 23, 2026

All releases · What’s new

macOS

Your device

  • Apple silicon (.dmg)

    2Secret_1.9.3_aarch64.dmg · 10.4 MB

    SHA-256: e19068e332eac21aa3d4383d5f19da10ab0946837ba6bc3ab1900292351be4c9

    Download

  • Intel (.dmg)

    2Secret_1.9.3_x64.dmg · 11.4 MB

    SHA-256: aeb2fb0659d7ee32b51196f060fa5e6d5aa2eaca21aa17f61a477253af724719

    Download
Installation notes

Apple silicon or Intel? Open the Apple menu → About This Mac. If it says Chip: Apple M…, choose Apple silicon. If it says Processor: Intel, choose Intel.

“Apple could not verify…” The first time you open 2Secret, macOS may refuse to open it. Go to System Settings → Privacy & Security, scroll down and click Open Anyway next to the message about 2Secret, then confirm. You only need to do this once.

Windows

Your device

  • Setup (.exe)

    2Secret_1.9.3_x64-setup.exe · 11.1 MB

    SHA-256: 6187546999fcf3e95f877b78865e76c294f204c896bcda8e902e6e9fc73dfe7f

    Download
Installation notes

Download the setup (.exe). It installs 2Secret for your Windows user, without administrator rights, and 2Secret can then update itself once you turn that on in the app (Settings → Updates).

Do you have the .msi version of 2Secret (up to 1.7.0)? The setup offers to remove it, so one 2Secret is left. Windows asks for permission, and your vault stays where it is.

“Windows protected your PC” Microsoft SmartScreen warns about apps it doesn’t know well yet. Click More info, check that the file name is right and that its checksum matches, then click Run anyway.

Linux

Your device

  • Debian / Ubuntu (.deb)

    2-secret_1.9.3_amd64.deb · 10.6 MB

    SHA-256: 563b143e66e320c4543bd9c9154d35daad1a6ee9ab30c762d533344ea909585d

    Download

  • Fedora / openSUSE (.rpm)

    2-secret-1.9.3-1.x86_64.rpm · 10.3 MB

    SHA-256: 6328025ea64e1fb8102a0e2aba6cd32fbde92e36023be282b717e06b7a1aedf5

    Download

  • AppImage (any distribution)

    2-secret_1.9.3_x86_64.AppImage · 86.6 MB

    SHA-256: 8720f36714395d120767fc2a7e6e27390206236081f56df7821740c377804d76

    Download
Installation notes
  • Debian, Ubuntu and derivatives: sudo apt install ./2-secret_<version>_amd64.deb
  • Fedora, openSUSE and other RPM distributions: sudo dnf install ./2-secret-<version>-1.x86_64.rpm
  • Any distribution: make the AppImage executable with chmod +x 2-secret_<version>_x86_64.AppImage and run it.

iPhone and iPad

Your device

Coming soon

Small one-time price

Installation notes

The iOS app costs a small one-time fee in the App Store, which covers the Apple developer account and hosting. It unlocks with Face ID or Touch ID and fills passwords and passkeys in Safari and other apps through iOS AutoFill. Like everything else it is open source: you can also build it yourself from the source code.

Android

Your device

No files for this platform in this release yet.

Installation notes

For phones and tablets with Android 7 or newer and a 64-bit ARM processor. Download the .apk and open it; when Android asks, allow your browser to install apps. The app’s data stays out of Android’s cloud backups.

Not on Android yet: biometric unlock, passkeys and system autofill.

Browser extension

Your device

  • Extension (.zip)

    2secret-extension-v1.9.3.zip · 2.5 MB

    SHA-256: b626aaf1c984c067c3cbcec7ef7238142ad7b580dbefce41a225b9be00e5b667

    Download
Installation notes

Until the extension is in the browser stores, load it from the zip:

  1. Unzip 2secret-extension-v<version>.zip to a folder you’ll keep.
  2. Chrome, Edge or Brave: open chrome://extensions, edge://extensions or brave://extensions, switch on Developer mode, click Load unpacked and select the folder.
  3. Firefox: open about:debugging, choose This Firefox → Load Temporary Add-on and select manifest.json (Firefox removes it again after a restart). Passkeys need Firefox 128 or newer.

CLI and server

Your device

  • Linux x86_64 (.tar.gz)

    2secret-v1.9.3-x86_64-unknown-linux-gnu.tar.gz · 7.4 MB

    SHA-256: fe390d48e45505ef8a391aac39cbe23a33aa9b1ad2670795968d938110e934b3

    Download

  • macOS Apple silicon (.tar.gz)

    2secret-v1.9.3-aarch64-apple-darwin.tar.gz · 6.7 MB

    SHA-256: 2d68dd62897094fe273466248bae949bb15ed6a79efa08691996d103fba0430a

    Download

  • macOS Intel (.tar.gz)

    2secret-v1.9.3-x86_64-apple-darwin.tar.gz · 7.1 MB

    SHA-256: f83d10fadad3f727f7f9f96697f92a8c38d277da3ca8b5e86290fc28a2493f26

    Download

  • Windows x64 (.zip)

    2secret-v1.9.3-x86_64-pc-windows-msvc.zip · 7.0 MB

    SHA-256: 8aa6874671590b947631d497a5c6adcb9c6e0a23834114eeb76a39c820571ab4

    Download
Installation notes

Each archive contains the 2secret command-line tool and the self-hostable server, 2secret-server. Check the SHA-256 checksum first, unpack it and put the binaries in your PATH. See the CLI guide and the self-hosting guide.

Server (Docker)

Your device
docker pull ghcr.io/joostiphone/2secret:latest

Multi-architecture image for amd64 and arm64: runs on servers, NAS devices and Raspberry Pi.

Read the self-hosting guide

Installation notes

The server image runs on amd64 and arm64: a VPS, a NAS, Proxmox or a Raspberry Pi. Follow the self-hosting guide for a setup with automatic HTTPS.

Web vault

Your device

  • Web vault (.tar.gz)

    2secret-web-v1.9.3.tar.gz · 2.5 MB

    SHA-256: afbadcc3dadfbc7c8f646876cabbb808ede2ba0d5cecfbc287a5c22519ec1d1e

    Download
Installation notes

The static files of the web vault, for serving it from your own server with 2secret-server --web-dir. The Docker image already includes them. Keep in mind that the web vault is only as trustworthy as the server that serves it.

FreeBSD, OpenBSD and NetBSD

Your device
Build from source

There are no ready-made packages for the BSDs yet, but 2Secret builds from source with the Rust toolchain. Clone the repository and follow the build instructions in its README.

Other files

SHA-256

Check that your download is genuine

Every file is listed with its SHA-256 checksum. If the checksum of your download matches, the file is exactly what we published.

SHA256SUMS

macOS and Linux (Terminal)

bash
shasum -a 256 2Secret_1.9.3_aarch64.dmg

Windows (PowerShell)

powershell
Get-FileHash .\2Secret_1.9.3_x64-setup.exe -Algorithm SHA256

Compare the output with the checksum shown next to the file above, or with the SHA256SUMS file.

Next steps

Installed? Here’s where to go next.