All releases

A new look on phones, and the iPhone app fills iPhone Duo.

• Phones (the iPhone and Android apps, the web vault on a phone): the Dashboard, Items and Watchtower are in a floating tab bar of glass at the bottom of the screen, with a search button beside it, in the style of Liquid Glass in iOS 26. The buttons at the top are glass too, and the content scrolls on under the tab bar, the status bar and the Dynamic Island, which blur it softly. The other sections stay in the menu.
• iPhone: the status bar is light or dark with the app's theme, also when the iPhone's own setting differs, and dialogs stay clear of the Dynamic Island and the home indicator.
• Menus on items and vaults: a long press (phones, tablets) or a right click (computers) on an item gives its menu: copy the username, password or one-time password, favorite, edit, rename, move, duplicate, share via link, select, move to the trash. A vault in the menu has one too: a new item in it, edit, share, delete or leave.
• Several items at once: select items (the select button above the list, Select in an item's menu, or Ctrl/Cmd+click) to favorite, move or trash them together, or in the trash to restore or delete them.
• Search shows your favorites first, then the items with the words in their title (the apps, Quick Access and 2secret list).
• The menu's categories, vaults and tags fold away with a tap on their heading; tags start folded.
• Website icons: Fetch for all logins goes on when you leave Settings and shows how far it is. It asks several websites at a time, each once for all its logins, tries the main domain for a login on a subdomain, takes sharper icons and scales down those over 24 KB instead of skipping them.
• iPhone Duo: 2Secret fills the whole screen, open and closed. Until now iPhone Duo showed it at the size of a regular iPhone. Open, the list and the item show side by side with the fold between them.
• The iPhone and iPad app is built with Xcode 27.1 and starts with the scene life cycle that iOS 27 asks of apps.

Downloads#

Server image for x86_64 and ARM64 (e.g. Raspberry Pi 4/5 with a 64-bit OS): docker pull ghcr.io/joostiphone/2secret:latest – see self-hosting.

On macOS, drag 2Secret to Applications and open it. If macOS says it cannot verify the app, open System Settings → Privacy & Security and click Open Anyway (on macOS 14 and older you can also right-click the app and choose Open). On Windows, SmartScreen may ask you to confirm (More info → Run anyway).

FreeBSD, OpenBSD, NetBSD and iOS: build from source, see the README.

Security fixes from a review of the apps, the server and the way releases are made.

• iPhone and iPad: the Secret Key is no longer included in iCloud and computer backups, so a backup never holds it next to the encrypted vault.
• AutoFill (iPhone, iPad, Mac) and the browser extension: on websites where everyone gets a subdomain of their own (such as github.io), a login is only offered on its own site, never on someone else's.
• The apps connect to a sync server only over https:// (plain http:// only to a server on the same device).
• A vault never goes back to a key it had before, so a server cannot give a removed member access to new items again.
• Copied passwords stay out of Windows' clipboard history and cloud clipboard, and out of clipboard managers on Linux and macOS.
• Website icons are fetched from public websites only, also when an address is an IP address written in a short form.
• The server checks the encrypted data it stores, so one account cannot disrupt syncing for others, limits sign-in attempts and password checks per address, and removes invisible characters from names.
• Updated libraries: rustls, the import of zip and XML files, and SQLite 3.53.2 in the server.
• Every release's SHA256SUMS is signed (SHA256SUMS.sig), so downloads that do not update themselves can be checked: see Checking a download in docs/UPDATES.md.

For people who run their own server:

• The invite codes of the examples (change-me…) no longer let anyone sign up: choose your own.
• install.sh reads the client's address from CF-Connecting-IP only with a Cloudflare Tunnel; set --ip-header for another proxy.

Downloads#

Server image for x86_64 and ARM64 (e.g. Raspberry Pi 4/5 with a 64-bit OS): docker pull ghcr.io/joostiphone/2secret:latest – see self-hosting.

On macOS, drag 2Secret to Applications and open it. If macOS says it cannot verify the app, open System Settings → Privacy & Security and click Open Anyway (on macOS 14 and older you can also right-click the app and choose Open). On Windows, SmartScreen may ask you to confirm (More info → Run anyway).

FreeBSD, OpenBSD, NetBSD and iOS: build from source, see the README.

• Foldables and medium screens (the inner display of iPhone Duo, tablets in portrait, small windows): the list and the item show side by side, at equal widths so the fold falls between them; on a foldable that reports its fold, the split is right at the fold. The menu opens next to the list.
• iPhone and iPad: the app keeps clear of the status bar, camera and home indicator on every side, also in landscape.
• Phones and tablets: the menu, buttons and other things you tap are at least 44 points high, so they are easy to hit with a finger.

Downloads#

Server image for x86_64 and ARM64 (e.g. Raspberry Pi 4/5 with a 64-bit OS): docker pull ghcr.io/joostiphone/2secret:latest – see self-hosting.

On macOS, drag 2Secret to Applications and open it. If macOS says it cannot verify the app, open System Settings → Privacy & Security and click Open Anyway (on macOS 14 and older you can also right-click the app and choose Open). On Windows, SmartScreen may ask you to confirm (More info → Run anyway).

FreeBSD, OpenBSD, NetBSD and iOS: build from source, see the README.

• Quick Access on the desktop: press Ctrl+Shift+Space (⇧⌘Space on the Mac) anywhere to find an item and copy its password (Enter), user name (Shift+Enter) or one-time code (Ctrl/⌘+Enter) without opening 2Secret; Alt/⌥+Enter shows the item in 2Secret. It is also in the menu of the icon in the menu bar or system tray. Under Wayland, where apps cannot register a shortcut, set one in the desktop's settings that runs 2-secret --quick-access. Settings → Desktop app turns it off.
• Start at login (Settings → Desktop app): 2Secret starts in the menu bar or system tray when you log in, without its window.
• Linux: what 2Secret copies stays on the clipboard also without a clipboard manager (until it is cleared after the time you chose).
• Settings → Desktop app holds the icon, starting at login and Quick Access.
• Scan a QR code from the screen (desktop): Scan QR code in the item editor sets up a one-time password from the QR code a website shows for two-step verification, and fills in the title and user name of a new item. 2Secret hides its window for a moment and reads the screens; the screenshot never leaves memory. macOS asks once for permission to record the screen, Wayland desktops may ask too.
• SSH agent (desktop, Settings → Desktop app): ssh, git and other programs log in and sign with the keys of SSH Key items (Ed25519, ECDSA, RSA; also passphrase-protected OpenSSH keys and RSA keys in PEM). 2Secret asks every time, naming the program and the key, or once per key until it locks; the private keys never leave 2Secret. On macOS and Linux point IdentityAgent in ~/.ssh/config at the socket shown in the settings; on Windows it is the agent of the OpenSSH client of Windows (stop the OpenSSH Authentication Agent service).
• Share via link (all apps and 2secret share): share an item, or the fields of it you pick, with someone without 2Secret. They open the link in any browser; it is end-to-end encrypted with a key that only the link holds, works for 1 hour to 30 days, can be limited to 1, 3 or 10 views and can ask for a password you send another way. Settings → Sync lists your links and revokes them (2secret shares). Needs a sync server with this version.
• Emergency access (all apps, 2secret emergency): trust people on the same server with read access to the vaults you own, for when you cannot give it yourself. They ask for it and get it after the waiting period you chose (1 to 30 days in the apps) unless you deny it; you can also approve at once. Your apps show the request. Ending the access gives the vaults new keys. Needs a sync server with this version.
• CLI: a password prompt no longer asks again forever when there is no input left.
• Desktop: while its window is hidden in the menu bar or system tray, 2Secret no longer pauses at its next screen update (the window draws nothing then), so Quick Access, syncing and locking keep working.

Downloads#

Server image for x86_64 and ARM64 (e.g. Raspberry Pi 4/5 with a 64-bit OS): docker pull ghcr.io/joostiphone/2secret:latest – see self-hosting.

On macOS, drag 2Secret to Applications and open it. If macOS says it cannot verify the app, open System Settings → Privacy & Security and click Open Anyway (on macOS 14 and older you can also right-click the app and choose Open). On Windows, SmartScreen may ask you to confirm (More info → Run anyway).

FreeBSD, OpenBSD, NetBSD and iOS: build from source, see the README.

• 2Secret has an icon in the menu bar (macOS) or the system tray (Windows, Linux). Its menu opens 2Secret, locks the vault or quits; on Windows a click on the icon opens 2Secret too. Closing the window keeps 2Secret running there, and it still locks after the auto-lock time. Settings → Appearance turns the icon off, and closing the window then quits 2Secret as before. Linux shows the icon through AppIndicator (on GNOME the AppIndicator extension); the .deb and .rpm now install its library.
• Starting 2Secret while it already runs brings its window to the front instead of opening a second 2Secret (Windows, Linux; macOS did this already), also when the window is hidden in the system tray.
• A field you add to an item with the kind Password gets Generate password, Password rules and the strength meter too, like the item's own password.

Downloads#

Server image for x86_64 and ARM64 (e.g. Raspberry Pi 4/5 with a 64-bit OS): docker pull ghcr.io/joostiphone/2secret:latest – see self-hosting.

On macOS, drag 2Secret to Applications and open it. If macOS says it cannot verify the app, open System Settings → Privacy & Security and click Open Anyway (on macOS 14 and older you can also right-click the app and choose Open). On Windows, SmartScreen may ask you to confirm (More info → Run anyway).

FreeBSD, OpenBSD, NetBSD and iOS: build from source, see the README.

• Windows: 2Secret comes as one setup (2Secret_<version>_x64-setup.exe) from now on, no longer also as an .msi. The setup installs 2Secret for your user, without administrator rights, and can update itself. The .msi installed 2Secret for everyone in Program Files, and the two did not replace each other, so you could end up with two copies. When the .msi version (up to 1.7.0) is installed, the setup offers to remove it, so one 2Secret is left; Windows asks for permission, and your vault stays where it is. Download under Settings → Updates in the .msi version gets this setup.

Downloads#

Server image for x86_64 and ARM64 (e.g. Raspberry Pi 4/5 with a 64-bit OS): docker pull ghcr.io/joostiphone/2secret:latest – see self-hosting.

On macOS, drag 2Secret to Applications and open it. If macOS says it cannot verify the app, open System Settings → Privacy & Security and click Open Anyway (on macOS 14 and older you can also right-click the app and choose Open). On Windows, SmartScreen may ask you to confirm (More info → Run anyway).

FreeBSD, OpenBSD, NetBSD and iOS: build from source, see the README.

• Password rules per password: next to Generate password in the item editor, Password rules sets how that password is made: random, memorable or a PIN, its length (also exactly, from 4 to 128 characters), and upper case, lower case, digits, symbols and look-alike characters. Every change makes a new password right away. The item keeps the rules, encrypted and synced, so the next new password for it follows them too; Use as default makes them the generator's defaults. Versions before this one keep the password but forget its rules when they save the item.
• The password generator takes an exact length next to its slider.

Downloads#

Server image for x86_64 and ARM64 (e.g. Raspberry Pi 4/5 with a 64-bit OS): docker pull ghcr.io/joostiphone/2secret:latest – see self-hosting.

On macOS, drag 2Secret to Applications and open it. If macOS says it cannot verify the app, open System Settings → Privacy & Security and click Open Anyway (on macOS 14 and older you can also right-click the app and choose Open). On Windows, SmartScreen may ask you to confirm (More info → Run anyway).

FreeBSD, OpenBSD, NetBSD and iOS: build from source, see the README.

• Settings → About shows where 2Secret is installed, and on Windows whether it is the setup for your user (which can update itself) or the MSI for everyone on the PC. The two install into different folders, so installing the MSI next to the setup leaves the setup's version as it was.

Downloads#

Server image for x86_64 and ARM64 (e.g. Raspberry Pi 4/5 with a 64-bit OS): docker pull ghcr.io/joostiphone/2secret:latest – see self-hosting.

On macOS, drag 2Secret to Applications and open it. If macOS says it cannot verify the app, open System Settings → Privacy & Security and click Open Anyway (on macOS 14 and older you can also right-click the app and choose Open). On Windows, SmartScreen may ask you to confirm (More info → Run anyway).

FreeBSD, OpenBSD, NetBSD and iOS: build from source, see the README.

• Windows Hello: turning it on (or unlocking with it) could fail with error 0x80098044. Windows opened its prompt behind 2Secret, and a face confirmed there after a few seconds no longer counted. 2Secret now brings the prompt to the front, and asks once more when Windows still turns it down.

Downloads#

Server image for x86_64 and ARM64 (e.g. Raspberry Pi 4/5 with a 64-bit OS): docker pull ghcr.io/joostiphone/2secret:latest – see self-hosting.

On macOS, drag 2Secret to Applications and open it. If macOS says it cannot verify the app, open System Settings → Privacy & Security and click Open Anyway (on macOS 14 and older you can also right-click the app and choose Open). On Windows, SmartScreen may ask you to confirm (More info → Run anyway).

FreeBSD, OpenBSD, NetBSD and iOS: build from source, see the README.

• Setup links on Windows, Linux and the BSDs: otpauth:// links on websites open 2Secret too, which adds the one-time password to a login. 2Secret registers itself for them for your user when no other app opens them; Settings → Security → Setup links for one-time passwords makes 2Secret the app for them. A link opened while 2Secret runs goes to that window.

Downloads#

Server image for x86_64 and ARM64 (e.g. Raspberry Pi 4/5 with a 64-bit OS): docker pull ghcr.io/joostiphone/2secret:latest – see self-hosting.

On macOS, drag 2Secret to Applications and open it. If macOS says it cannot verify the app, open System Settings → Privacy & Security and click Open Anyway (on macOS 14 and older you can also right-click the app and choose Open). On Windows, SmartScreen may ask you to confirm (More info → Run anyway).

FreeBSD, OpenBSD, NetBSD and iOS: build from source, see the README.