Sealed files

The list of everything you connect to — sites, servers, machines, secrets — and the list of mail accounts are encrypted FILES.

Two kinds of files

• its own, local, next to the configuration;
• those you have linked: a file on a share, a USB stick, a server. This is how a team shares its passwords — the file stays where it is, Meneaufile only remembers where to look for it.

A linked file has ITS own password, which is not that of the local file. Each one opens and locks on its own.

The key file

A linked file can also have a key file: a second lock, which the password alone does not replace. “Generate a key file…”, in the menu of its row, draws sixty-four random bytes and writes them next to the configuration, under the file’s name — always there, never elsewhere.

A new machine needs its own copy: when the key is missing, Meneaufile says where to put it, and if a panel already shows it, it offers to import it.

Losing a key file closes the sealed file for good. This is said before it is created.

Rename, move

A linked sealed file is renamed from its row: it is the file on the disk that is renamed, its extension kept. Nothing is copied, nothing is decrypted.

Dated copies

Before every write, Meneaufile sets aside the previous state of the file, encrypted like it, in the backup folder of the configuration — %APPDATA%\meneaufile\backup on Windows, ~/.config/meneaufile/backup on Linux. It keeps the last ten of the day, then the last one of each earlier day, over thirty days.

For NET entries, a button takes you back. In the list, the Go back to a previous version… button in the panel’s bar — or the same item when right-clicking the NET button, below the KeePass import — shows the copies by date and time. Choose one, and the list becomes what it was. The state you leave is set aside first: going back can be undone the same way. A copy from before a change of the master password opens only with the old one, and the dialog says so.

For another sealed file, by hand: close Meneaufile, set the damaged file aside, then copy the copy you want in its place under its name — local_20260930-195717.meneaumail becomes local.meneaumail again. The same password opens it.

Meneaufile manual, in English.