GK3 Safe Entries
Notes and passwords in an encrypted vault on your device
A local vault protected by a master password and a recovery key. No account, no ads, no tracking. This is an early test version: it works, but it is still changing.
Download for Windows and Linux
Loading the list of versions…
Install with apt (Debian, Ubuntu)
The Debian package is also available from our own apt repository, signed with a separate key. You add it once; after that, updates arrive when you run apt upgrade. The app itself never installs updates.
Fingerprint of the repository key: 3315 74DB 9944 ED95 6D71 CBB3 AF55 0DB0 7C4B 4874
1. Download the key and compare the fingerprint it shows with the one above:
sudo curl -fsSL https://gk3-apps.com/downloads/gk3-apps-archive-keyring.gpg -o /usr/share/keyrings/gk3-apps-archive-keyring.gpg
gpg --show-keys --with-fingerprint /usr/share/keyrings/gk3-apps-archive-keyring.gpg2. If it matches, add the repository and install:
echo "deb [arch=amd64 signed-by=/usr/share/keyrings/gk3-apps-archive-keyring.gpg] https://gk3-apps.com/downloads stable main" | sudo tee /etc/apt/sources.list.d/gk3-apps.list
sudo apt update && sudo apt install gk3-safe-entriesThe key is downloaded from this site over HTTPS. It protects you against a damaged or replaced package, not against a compromise of this site.
Android
The Android version is being prepared for Google Play. It will have no internet permission.
Verify the download
Every file is listed in SHA256SUMS, which is signed with the project key. Check the signature first, then the checksum of your file.
Public key (minisign): RWQHuxUdInujJqp8oP+MzaC+Q9AdJJrIj6H0fCr6m9tgq3IKZPMGA+nP
1. Download SHA256SUMS and SHA256SUMS.minisig of the same version and check the signature:
minisign -Vm SHA256SUMS -P RWQHuxUdInujJqp8oP+MzaC+Q9AdJJrIj6H0fCr6m9tgq3IKZPMGA+nP2. Windows (PowerShell): compare the result with the line of your file in SHA256SUMS:
Get-FileHash .\GK3-Safe-Entries-<version>-windows-x64-setup.exe -Algorithm SHA2562. Linux: check your file against SHA256SUMS:
sha256sum --ignore-missing -c SHA256SUMS