2Secret 1.12.0

Agent Access, part three: an AI agent on another computer asks your 2Secret through your sync server, and you answer on your computer or phone.

Agents elsewhere (Settings → Agents elsewhere, desktop and phone). Pair an agent that does not run on your computer (Claude Code in the cloud, an agent on a server, a second machine) with a code 2Secret shows: 2secret agent pair <code> there, Confirm agent here after comparing the fingerprint. From then on 2secret mcp --remote on that computer gives the AI tool the same tools as a local agent, and every question (a password, a one-time code, saving an item) comes to your unlocked 2Secret, on the desktop or the phone; the first answer counts. The sync server relays sealed, signed envelopes it cannot read or forge: it sees which agent asked when and how large the question was, never what. Revoke an agent on any device. Needs a server with 2Secret 1.12 (sync.2secret.app has it); the protocol is in docs/AGENT-PROTOCOL.md.
Signing in from elsewhere (fill_login, 2secret agent fill): with the browser on the agent's computer started with --remote-debugging-port, 2Secret there puts the login you allowed into the tab that belongs to the item's website and submits it; the model never sees the password. Chrome, Edge, Brave and Chromium.
Server: tables and routes for agents elsewhere, limits --max-agents and --max-agent-requests (TWOSECRET_MAX_AGENTS, TWOSECRET_MAX_AGENT_REQUESTS), signed agent header with replay protection, long-polls.
Command line: 2secret agent pair, unpair, fill; 2secret mcp --remote [NAME] [--cdp …]; 2secret agent status lists pairings.

Downloads

File	What
`2Secret_*_aarch64.dmg`	macOS app for Apple silicon (M1 and newer)
`2Secret_*_x64.dmg`	macOS app for Intel Macs
`2Secret_*_x64-setup.exe`	Windows app (installs for your user and can update itself; removes an `.msi` version of 2Secret up to 1.7.0)
`.deb`, `.rpm`, `*.AppImage`	Linux app (x86_64)
`2Secret_*_android-arm64.apk`	Android app (Android 7 and newer) – allow installing from your browser when asked
`2Secret_*_android-arm64.aab`	Android app bundle for app stores
`2secret-*-<platform>.tar.gz` / `.zip`	`2secret` CLI and `2secret-server` for Linux, macOS (Apple silicon and Intel) and Windows
`2secret-web-*.tar.gz`	Web vault – serve it with `2secret-server --web-dir`
`2secret-extension-*.zip`	Browser extension for Chrome, Edge, Brave and Firefox (load unpacked)
`SHA256SUMS`, `SHA256SUMS.sig`	Checksums of all files, signed with 2Secret's update key (how to check)

Server image for x86_64 and ARM64 (e.g. Raspberry Pi 4/5 with a 64-bit OS): docker pull ghcr.io/joostiphone/2secret:latest – see self-hosting.

On macOS, drag 2Secret to Applications and open it. If macOS says it cannot verify the app, open System Settings → Privacy & Security and click Open Anyway (on macOS 14 and older you can also right-click the app and choose Open). On Windows, SmartScreen may ask you to confirm (More info → Run anyway).

FreeBSD, OpenBSD, NetBSD and iOS: build from source, see the README.

Downloads#

Downloads