2Secret Password Manager

2Secret keeps your passwords, passkeys, cards, notes, identities and other secrets safe – end-to-end encrypted, open source, and under your control.

SECURITY FIRST
• Everything is encrypted on your device before it is stored or synced (XChaCha20-Poly1305, 256-bit keys).
• Your vault is protected by your master password and a 130-bit Secret Key that never leaves your devices. Even a stolen server database is useless without both.
• Sharing with family or colleagues uses quantum-resistant encryption (X25519 + ML-KEM-768).
• Unlock with Face ID or Touch ID. The master password is still asked every 14 days, so you never forget it.
• Fully open source: anyone can check how it works.

YOUR DATA, YOUR CHOICE
• Sync through the free 2Secret server: nothing to set up, and it never sees your passwords.
• Or run your own 2Secret server (a free Docker container on a Raspberry Pi, NAS or VPS).
• Or keep your vault on this device only – no server at all.

EVERYTHING IN ONE PLACE
• Logins, passkeys, credit cards, bank accounts, identities, passports, Wi-Fi, SSH keys, API keys, software licenses, secure notes and more.
• Built-in authenticator for one-time codes (TOTP), also filled in by AutoFill.
• AutoFill passwords and passkeys in Safari and apps.
• Watchtower finds weak, reused and breached passwords and expiring cards.
• Strong password and passphrase generator.
• Shared vaults with viewer, editor and manager roles.
• Share a single item with anyone through an end-to-end encrypted link that expires.
• Emergency access: people you trust can ask for access to your vaults when you can't give it yourself.
• Import from 1Password, Bitwarden, LastPass, KeePass, Chrome, Firefox and more.
• Also on Mac, Windows, Linux, the web and as a browser extension.

No subscription. No ads. No tracking.