iOS app is in testing phase. Please help by testing via TestFlight 🙏🏻 Join the beta here
2Secret
Donate Download
Download Donate View on GitHub

Local only

No server. Just your vault, on your device.

The simplest way to use 2Secret: your vault lives on one device and never leaves it. You can always connect a server later.

Download

Is it for you?

What you get, and what you miss.

What you get

  • All app features: item types, Watchtower, generator, TOTP and imports
  • The same encryption, including the Secret Key
  • Works completely offline
  • Nothing to maintain

What you miss

  • Not included: No sync: the vault stays on this one device
  • Not included: No sharing with family or colleagues
  • Not included: Backups are your own responsibility
Prefer sync? Run your own server

Set up

Up and running in five minutes.

  1. Install the app

    Download 2Secret for your device and open it.

  2. Create a local account

    Choose Create a new account and leave Sync with a 2Secret server switched off. The app still asks for your name and e-mail address, which stay on your device; no server is needed.

  3. Pick a strong master password

    At least 12 characters, and it must get a “good” rating. A passphrase of a few random words works well and is easier to remember.

    This is the one password you need to remember. Don’t use it anywhere else.

  4. Save your Emergency Kit

    The app shows your Secret Key and offers your Emergency Kit to download. Print it or store it offline, somewhere safe. Together with your master password it unlocks your account, and nobody can recover either of them for you.

  5. Bring your passwords over

    Import from your current password manager or browser. See importing, step by step.

Backups

One device means one copy. Back it up.

If your device breaks or is stolen, a backup is the only way back to your vault.

  1. Make an encrypted backup

    Go to Settings → Export and choose Encrypted 2Secret backup. The file is encrypted with a password you choose (Argon2id and XChaCha20-Poly1305), so with a strong password you can keep it on a USB stick or in cloud storage.

  2. Keep it somewhere else

    A backup on the same device won’t help if that device is gone. Keep at least one copy elsewhere, and make a new one regularly.

  3. Plain exports are not encrypted

    JSON and CSV exports are readable by anyone who gets the file. Use them only to move to another app, and delete them afterwards.

Later

Changed your mind? Connect a server any time.

When you’re ready to sync between devices or share a vault, set up your own server and connect your local vault to it in Settings → Connect to server. Your existing items come along.

Self-hosting guide