SecretSpace keeps passwords, so security reports are welcome and taken seriously.
Please do not open a public issue. Report it privately through GitHub: the repository's Security tab -> Report a vulnerability.
Include what you found, the version (Settings -> About, or dpkg -s secretspace), and the steps to
reproduce it. You will get an answer within a week. Please give a reasonable
time for a fix before you publish anything.
| Version | Supported |
|---|---|
| Latest release | Yes |
| Pre-releases (alpha) | Best effort; they are test versions |
| Older releases | No; please update first |
The client in this repository: vault encryption, the master password, Secret Key and recovery phrase handling, the clipboard, the .deb package and the sync client. Server issues go to SecretSpace-Server-Linux, the same way.