Docs / Getting started

Keepsake on a Mac or a Linux machine

There is no Keepsake app for macOS and none for Linux. There is no beta, no unlisted build, and nothing scheduled. Saying so in one sentence is more useful than a roadmap, because a roadmap is a thing you would have to check back on.

What runs on both, today, is the web app: app.securekeepsake.com. It is not a preview of the desktop app or a viewer for it. The same vault format, the same encryption, the same sync — a browser vault is a full peer that can create, edit and restore everything.

Install it so it stops looking like a website

1. Open app.securekeepsake.com in Chrome, Edge, Safari or Firefox.
2. Create a vault — no account, no download — and save the 24-word Recovery Kit it shows you once.
3. Install it:

- macOS, Chrome or Edge: the install icon at the right-hand end of the address bar, or ⋮ → Cast, save and share → Install page as app. It lands in Applications and in the dock. - macOS, Safari: File → Add to Dock. - Linux, Chrome/Chromium/Edge: the same install icon; it writes a .desktop entry, so it appears in your launcher like anything else. - Firefox has no install step. It works perfectly well as a tab, and everything below still applies — the vault is stored locally either way.

Once installed it opens in its own window with no address bar, keeps working with the network off, and holds your vault encrypted in browser storage on that machine.

What you give up

This is the honest part, and it is the reason this page exists rather than a download button that quietly points at a browser.

| On Windows | On a Mac or Linux | |---|---| | Print to Keepsake — file from any application's print dialog | Not available. A print driver is an operating-system component; a web page cannot be one. | | Mailbox check — Keepsake connects to your inbox and files attachments | Not available, and deliberately so. A browser cannot open a raw socket to a mail server, so doing it in the web app would mean routing your mail credentials through a server of ours. We would rather not have the feature than have that. | | Watched folders, bulk import of a whole directory tree, Cryptomator vault import | Not available. A browser is handed one file, or one folder you picked, at the moment you pick it — it is not given the disk. | | Assistant access over MCP | Not available. It works by a local process talking to the running app over a named pipe, and a browser has neither. | | Windows Hello unlock | Different, and not worse: use a passkey or a security key — Touch ID on a Mac, or a YubiKey on either. See Unlock your vault with a passkey. | | OCR on the desktop engine | Runs in the browser through WebAssembly. Slower on a large scan, same output. |

Everything else — the vault, sync, search, Ask, expiry reminders, Secure Send, the Family Vault, Travel Mode, the Legacy Access Kit, Urdu and Arabic — is there.

Storage on a Mac or Linux is not the same as a file on disk

A browser vault lives in that browser's storage for that site. It survives closing the window, restarting, and being offline for months. It does not survive "clear browsing data" with site data ticked, and on iOS it can be evicted after long disuse.

So do both of these, once:

• Keep the Recovery Kit somewhere that is not that machine. It is the only thing that can rebuild a vault from nothing.
• Turn on sync to your own Google Drive or OneDrive folder (Setting up sync). Then the machine holds a copy rather than the original, and clearing site data costs you a re-download instead of everything.

Installing the app to the dock also makes the browser treat the storage as persistent rather than as a cache, which is a second reason to do it.

If you want a native Mac app

You want a different product today, and that is a reasonable thing to want. What we would say is: check what the native app on your Mac actually gives you over an installed web app, feature by feature, because for a document vault the answer is often the four Windows rows in the table above and nothing else. Our how to choose page scores us down for this, and it stays scored down until there is a build to point at.

---