Download Cloakspire
Free to start, no account required. Currently available for Windows.
System requirements
- Windows 10 or later (64-bit)
- ~120 MB disk space
- No internet connection required to run
Other platforms
Mac & Linux builds coming soon- macOS and Linux aren't available yet. Windows is where Cloakspire lives today.
Version history
Every release and what changed. Only the current release (v1.0.40) is available to download - older installers were removed once code signing shipped, since none of them were signed.
v1.0.40
2026-09-17- Added: an optional mobile-compatible export in File > Backup Vault, ahead of a future Cloakspire mobile companion app. Backing up is unchanged by default - pick a location, done, no prompts. Checking the new "Make this backup mobile-compatible" box asks for your master password and re-wraps that one backup file in a format mobile will be able to import; your live desktop vault and its encryption are never touched.
v1.0.39
2026-09-15- Fixed: Ctrl+C in the SSH terminal triggering copy instead of sending a real interrupt (SIGINT) to the remote shell - it was matching the platform's standard "Copy" shortcut, which is plain Ctrl+C on Windows. Ctrl+Shift+C is now the only thing that copies; plain Ctrl+C always goes to the remote program, like a real terminal.
- Added: the installer is now code-signed with a genuine Microsoft-issued certificate, so Windows can verify it actually came from us. Every release prior to this one has been removed, since none of them were signed - if you're on an older version, please update to this one.
v1.0.38
2026-09-03- Fixed: a real, reported security gap - license (Pro/Free) status used to live as plain rows in the same portable vault database as everything else, so restoring any vault that was ever Pro (your own from another machine, or a colleague's sent over for something unrelated) silently granted the whole machine full Pro access, with zero purchase and zero key entry. License state now lives in its own small per-machine file, outside the vault database entirely - restoring or replacing the vault always resets a machine to Free, and getting Pro back is a license key paste away, not automatic. Existing Pro users keep their status via a one-time, automatic migration.
- Fixed: Free-tier accounts being able to fully browse and open every project in a database, not just the one they're allowed to create. Free now only ever sees its single project, regardless of how many others exist in the database.
v1.0.37
2026-09-03- Added: the installer now checks (best-effort, ~4s timeout, silently skipped if offline or on a scripted/silent install) whether a newer Cloakspire is available before installing. If the downloaded installer is stale, it shows the newer version's release notes and offers to open the download page for the latest instead of continuing with the old one.
v1.0.36
2026-09-03- Added: 'Already have a vault? Restore from backup' on the first-time setup screen - moving to a new machine (Backup Vault on the old one, this on the new one) is now a one-step, obvious path instead of having to initialize a throwaway vault first and hunt for File -> Restore Vault afterward. Pro license status carries over automatically, since it lives as plain rows in the same database file.
v1.0.35
2026-09-03- Added: 'Start Fresh' on the Reset Master Password screen - the one dead end left in the app (forgot your master password AND have no recovery code) now creates a brand-new, empty vault instead of leaving no way back in at all. Nothing is deleted - the old, inaccessible database is renamed aside in the same data folder, in case you ever remember the password or get it professionally recovered.
- Clarified in the Terms of Service and FAQ that a Pro license key is meant for personal use across your own devices - not technically limited to one machine, but not transferable to someone else either.
v1.0.34
2026-08-24- Added: right-click a person in a Directory's table for Copy Email / Copy Username / Copy Password, each shown only when that field actually has a value - matches the same copy-menu pattern Personal Vault already uses.
v1.0.33
2026-08-24- Fixed: the Directories table's Actions column (Copy/Edit/Delete) being visibly clipped - two compounding causes, a stretch-behavior conflict on the column's fixed width and a default row height too short to fit the buttons' text at all.
- Fixed: CSV import failing entirely for a semicolon-delimited file - Excel defaults to semicolons instead of commas on many European locales (comma is reserved as the decimal separator there), which was being read as one single unmatched header column. Delimiter is now auto-detected.
- Fixed: CSV import hardened so one malformed or unexpectedly-shaped row can no longer abort the entire import - each row is now processed independently.
v1.0.32
2026-08-24- Fixed: an already-open SSH terminal tab staying on its old theme's colors after switching theme in Settings - a dark session stayed black after switching to light, and vice versa, while a freshly-opened tab looked correct. Now wired into the same live theme-refresh the rest of the app already does - covers both tabs still in the SSH Terminal Hub and any detached into their own standalone windows.
- Fixed: the SSH Terminal Hub's title/tab-bar area staying on its old theme's colors if you switched theme while it was already open.
- Added: right-click a tab in the SSH Terminal Hub for 'New Session' - opens another live session to the same server in its own tab, for cases like tailing a log in one tab while running commands for the same server in another. The normal Connect button still reuses an existing tab by default.
- Removed: the SSH terminal's diagnostic logging (ssh_debug.log), added while chasing two now-closed investigations. It logged every keystroke typed into any SSH terminal and the raw bytes exchanged with the remote server in plaintext.
v1.0.29
2026-08-23- Fixed: found the real root cause of 'Failed to load Python DLL' - it fired straight from the installer's own launch of a completely fresh install, ruling out every prior theory about what was launching the exe. The actual cause was the onefile build itself, which re-extracts python313.dll and every dependency DLL to a fresh temp folder on every single launch, racing antivirus's scan of those brand-new files every cold start. Switched the build to onedir: the exe and its DLLs are now written once at install time and sit in the install folder permanently, with no more per-launch extraction for anything to race against.
v1.0.28
2026-08-23- Fixed: the actual architecture problem behind two straight failed attempts at 'Failed to load Python DLL' after an update - both tried to make the installer invisible, and both were reported as Cloakspire closing with nothing visibly happening even though the update had genuinely succeeded underneath, most likely because a helper process spawned from inside the running app can be silently killed the instant the app exits. The installer now shows its real, visible progress again - its own independent process from the moment it starts - with 'Launch Cloakspire' checked by default on the finish page and a short settling pause before it starts the freshly-installed exe.
v1.0.27
2026-08-23- Fixed: the real remaining cause of a 'Failed to load Python DLL' error after updating - the update flow now waits for the silent install to genuinely finish before reopening Cloakspire, instead of racing to reopen while it was still mid-write.
v1.0.26
2026-08-23- Fixed: found and fixed the real root cause of the SSH terminal's scrollback view visibly shifting or clipping content - the terminal's real scrollbar directly controls the visible content offset, not just a displayed position, so overriding it to reflect scrollback history could leave the real content scrolled a few pixels off from true. Moved the history indicator to a completely separate scrollbar that can no longer influence the real one.
- Fixed: Ctrl+Shift+C and the terminal's right-click Copy now show a toast confirming what happened instead of doing it silently.
- Fixed: Help -> Enter License Key... now correctly hides for every already-unlocked install, not just one activated via a real key.
- Fixed: the auto-update flow now installs silently and no longer auto-relaunches Cloakspire the instant install finishes, which could race a fresh exe against antivirus scanning and fail to start.
- Added: About Cloakspire shows who a purchased license is registered to.
- Added: the app's data folder is now named Cloakspire instead of the historical EnvVault - an existing install's real data migrates there automatically and safely on first launch, with the original folder always left in place as a backup.
v1.0.25
2026-08-22- Fixed: found and fixed the real root cause of an SSH terminal that could look connected but stop accepting input, worst on busier remote shells - a screen-redraw/scrollbar feedback loop that flooded the remote with resize requests continuously for as long as the tab stayed open, which some servers eventually responded to by closing the connection. Locked the scrollbar to a constant width so there's nothing left to oscillate.
v1.0.24
2026-08-22- Fixed: reverted SSH keystroke sending to the exact synchronous behavior from v1.0.13, confirmed by direct before/after testing to work reliably against a server that a later, more complex send path did not - the newer path could look like a burst of small packets on the wire instead of natural one-at-a-time typing.
v1.0.23
2026-08-22- Added: logs the actual bytes received back from the remote SSH server, not just what was sent - closes a blind spot in diagnosing a session that disconnects on its own shortly after connecting.
v1.0.22
2026-08-22- Added: the SSH reader thread now records and logs the actual reason a session disconnected (remote EOF, a specific transport error, or a locally-requested close) instead of always reporting a generic 'Connection closed'.
v1.0.21
2026-08-21- Fixed: detaching an SSH terminal tab into its own window produced a totally blank window - the connection stayed live underneath, but nothing ever rendered.
v1.0.20
2026-08-21- Added: logs every application-wide keyboard focus change to help diagnose a remaining 'SSH terminal never receives a single keystroke, even from clicking directly into it' report on some servers.
v1.0.19
2026-08-21- Fixed: re-clicking Connect on a server already open in the Terminal Hub could open a second, duplicate tab for it instead of switching to the existing one.
- Added: much deeper diagnostic logging across the keyboard-to-SSH-channel path, aimed at a remaining 'terminal looks connected but won't accept keystrokes' report on some servers.
v1.0.18
2026-08-21- Fixed: SSH terminal sessions to some servers (e.g. a remote VPS behind a cloud provider's network) could silently disconnect after a period without traffic - paramiko sends no SSH-level keepalive by default, so a NAT or firewall in between that drops quiet connections had no reason not to. Connections now send a keepalive every 15 seconds of inactivity.
v1.0.17
2026-08-21- Fixed: found the actual root cause of an SSH terminal sometimes not accepting keystrokes for one server while another worked fine (the 1.0.16 focus-timing fix wasn't the whole story) - a busy remote channel could make a keystroke's send silently time out and vanish with no error. Sends now retry instead of dropping, and any keystroke ultimately lost is logged instead of disappearing without a trace.
- Improved: the actual SSH write now runs on a dedicated background thread instead of the UI thread, so a slow or stuck send can no longer freeze the rest of the app while it retries.
v1.0.16
2026-08-20- Fixed: closing every tab in the Terminal Hub left a broken/ghosted-looking empty window instead of a clean empty state.
- Fixed: newly opened or switched-to terminal tabs could visually show as connected but not actually accept keyboard input, a focus race with Qt's own tab-bar/window-activation handling.
v1.0.15
2026-08-20- Fixed: after a successful update download, launching the installer could fail with a Windows error like "Windows cannot find '\\'" instead of actually starting it - the installer path no longer goes through a shell command string that could corrupt it.
v1.0.14
2026-08-20- Added: Directories (Pro) - named collections of Person credential records (name, job position, department, email, username, password, phone, Active/Inactive status) for a "who at this company has what login" security review. CSV import/export with a downloadable template.
- Added: SSH terminals now open as tabs in a single shared Terminal Hub window instead of a separate floating window per server. Any tab can still be detached into its own independent window, live session carried over.
- Added: the terminal's 4000-line scrollback now has a real, draggable scrollbar and responds to the mouse wheel, not just a keyboard shortcut.
- Added: Help -> Enter License Key... activates a purchased key without needing to click a locked Pro feature first.
v1.0.13
2026-08-20- Fixed: found and fixed the actual root cause of updates getting stuck at 0% with no error, present since the threaded-download rewrite in 1.0.5 - the progress dialog's stylesheet referenced a theme token that doesn't exist, crashing before the download thread ever started, invisible because this build has no console.
- Added: the update-download dialog now shows a live, scrolling log of what it's doing, and stays open on failure so it's actually readable. Any unhandled error anywhere in the app is now written to a persistent crash log instead of silently vanishing.
v1.0.12
2026-08-19- Added: Personal Vault has a new item type, API Keys, distinct from Tokens - an optional Key ID (the public identifier some systems pair with the secret), the key value, Scopes/Permissions, the Header Name it's sent in, an Active/Revoked status, an optional website (auto-fetches an icon), and an optional expiry date.
v1.0.11
2026-08-19- Fixed: update checks/downloads could still hang indefinitely at 0% with no error, even after the 1.0.8/1.0.9 fixes - the real gap was DNS resolution not being bounded by any timeout, so a stuck lookup could hang before a connection even existed. Now covered by an externally-enforced deadline over the whole operation.
v1.0.10
2026-08-04- Added: Personal Vault has a new item type, Tokens (token/API key value, an optional website, and an optional expiry date) - like Logins, its website powers an automatically fetched icon.
- Added: every Personal Vault item type can now have a custom icon uploaded manually from its edit dialog, not just an auto-fetched one.
v1.0.9
2026-08-04- Added: "Dashboard Home" is now a permanent, distinctly-styled button pinned above the project list, replacing the "Cloakspire" wordmark row - no longer the first row of the scrollable/searchable project list.
- Fixed: rows in the Dashboard drilldown modals could still clip their text and "Go to" button after the 1.0.8 row-height fix.
- Fixed: update checks and downloads now send an explicit identifying User-Agent instead of Python's default, which some CDNs can throttle or handle inconsistently.
v1.0.8
2026-08-04- Fixed: update downloads could stall at 0% with no error on a slow connection - the timeout only caught a fully silent read, never a slow trickle. Now bounded by an overall 10-minute budget with a clear, actionable error instead of hanging silently.
- Fixed: rows in the Dashboard drilldown modals were visually cramped - increased row height for more breathing room.
v1.0.7
2026-08-04- Added: the Dashboard's Missing Variables, Duplicate Keys, Expiring Tokens, and Servers cards are now clickable, showing what's behind the number and jumping straight to it.
- Fixed: Missing Variables no longer shows a count with an empty drilldown for projects scanned before this feature shipped, the Scanner drilldown now correctly requires Pro, and dashboard cards are genuinely non-interactive (not just a different cursor) when there's nothing to show.
v1.0.6
2026-08-03- Improved: the variable table's select-all corner button now toggles (a second click deselects) and its icon reflects the actual selection state instead of always showing the same glyph. Also made smaller.
v1.0.5
2026-07-31- Improved: update downloads now run in the background with themed progress, byte counts, and cancellation, keeping Cloakspire responsive.
- Fixed: the installer now waits for the running one-file app to exit before launching, preventing transient python313.dll failures after updating.
v1.0.4
2026-07-31- Added: Personal Vault items can now be linked to projects and viewed from the current project's More menu.
- Added: Quick Links now support manual icon fetching and icon uploads for sites that do not expose a clean favicon.
- Improved: Cloakspire now remembers window sizes, shows a themed startup progress screen, and logs startup timings for troubleshooting.
- Fixed: duplicate app windows, stale project header theme colors, secret visibility rules, and favicon edge cases.
v1.0.3
2026-07-25- Fixed: the update/reinstall/downgrade detection added in 1.0.2 could block on an unanswered prompt during a silent install - now always proceeds without prompting when run silently.
v1.0.2
2026-07-25- Improved: the installer now clearly says whether it's an update, a reinstall, or an older version than what you already have, instead of a generic "already installed" prompt.
v1.0.1
2026-07-25- Fixed: Copy Secret on Quick Links (project and dashboard) now actually copies to the clipboard instead of only showing a false success message.
v1.0.0
2026-07-24- First public release of Cloakspire.