Releases

Latest

The latest release of the app is available to download on the home page or select a file from the list below; to download earlier releases you can browse the releases archive and see the installation docs for more information.

Integrity

We recommend verifying the integrity of downloaded releases to ensure they have not been corrupted. To verify the integrity of a download fetch the corresponding SHA256 checksum file (.sha256.txt file extension) and compare the checksum with the downloaded file. For example the latest beta release for MacOS:

• Release Artifact
• Checksum File

For all platforms the computed checksum must match the value in the checksum file to be trusted.

MacOS

shasum -a 256 saveoursecrets.pkg
cat saveoursecrets.pkg.sha256.txt

Linux

sha256sum saveoursecrets.pkg
cat saveoursecrets.pkg.sha256.txt

Windows Powershell

$checksum = Get-FileHash -Path "saveoursecrets.msi" -Algorithm SHA256
$checksum.Hash

Signatures

All of our release artifacts are signed using Sigstore; signature files have a .sig.txt file extension.

To verify the signature for a release artifact first install cosign and then download our signing public key. Afterwards, download the release artifact and corresponding signature, for example the latest beta release for MacOS:

• Release Artifact
• Signature File

Then you can verify the signature with cosign:

cosign verify-blob \
  --key signing-key.pub \
  --signature saveoursecrets.pkg.sig.txt \
  saveoursecrets.pkg