Download

Version 1.1.6 (77) · released October 12, 2026 at 19:47

What's new

  • Website sign-in and data requests while the app is locked: the request is shown right on the PIN pad and in the biometric prompt, with no extra confirmation screen. Decline with one tap without unlocking

Full release history

App stores

Direct downloads

Android

APK, Android 7.0+. Allow installs from unknown sources for your browser or file manager.

SHA-256

Download 99.8 MB

macOS

Disk image (.dmg), Apple silicon and Intel. Open and drag Secret Keeper to Applications.

SHA-256

Download 38.8 MB

Windows

Installer for Windows 10/11. Download and double-click to install.

SHA-256

Download 30.8 MB

Browser extension

For Chrome, Edge and other Chromium browsers.

SHA-256

Download 0.3 MB

Verify what you downloaded

Compare the fingerprint of the file with the one on this page - the product is about verifiability, downloads should be verifiable too.

macOS / Linux

shasum -a 256 SecretKeeper-1.1.6-77.dmg

Windows (PowerShell)

Get-FileHash SecretKeeper-1.1.6-77.exe -Algorithm SHA256

Install from the command line

Homebrew installs the same signed .dmg as above. Afterwards the app updates itself.

macOS (Homebrew)

brew install --cask paymaster-technologies/tap/secretkeeper

Works with your other apps

Local apps can pair with Secret Keeper over IPC (unix socket / named pipe) and delegate encryption to it - keys never leave the vault. That is how the Tetatet Chat messenger integration works.

Our apps

The easiest way is to install it from the Chrome Web Store:

Download on Chrome Web Store

Prefer the archive from the site? It installs unpacked:

  1. Download the .zip and unpack it into a folder you keep.
  2. Open chrome://extensions and enable “Developer mode” (top right).
  3. Press “Load unpacked” and choose the unpacked folder.
  4. Pin Secret Keeper to the toolbar - the popup works like the app: create or import a profile with 12 words.
Download the archive 0.3 MB

Store listings are being prepared. Until they are live, grab a build directly - every file is listed with its SHA-256 fingerprint.