[Quost]

What

A protected note can now be shared as an encrypted .menewsecret file instead of pasting the password into Teams or Slack.

• To a contact. Each Menew keeps an X25519 key in the Keychain. People exchange their public "Menew code" once, which is safe to send over chat. The file is sealed to the recipient with ephemeral and static key agreement, HKDF and AES-GCM, so only their Mac can open it and the sender shows as verified.
• With a password. Menew generates a 16-character passphrase (≈79 bits) and derives the key with PBKDF2-SHA256 at 600,000 rounds. The UI warns to send the passphrase through another channel.
• Receiving. Drop the file on the notch, double-click it (new exported UTI com.matheusquost.menew.secret plus a document type in Info.plist), or use Notes › Share passwords › Import file. The secret is written straight to the Keychain as a protected note and never touches notes.json.
• Header protection. The whole header is authenticated data, so changing the sender, recipient, salt or rounds makes the file fail to open.
• Scope. No network calls and no new dependencies (CryptoKit and CommonCrypto only).

UI

• A share button on protected notes, also in the ⋯ menu and the right-click menu. You pick which fields go, then choose a contact or a password.
• A new Share passwords screen, opened from the Notes list header: your code with a short fingerprint, your contacts, and Import.
• An import screen that shows the sender (verified or unknown, with an option to save them as a contact) and the field names with their values hidden.

Checklist

• Translations: 53 new strings in en, de, es and zh (check-l10n.py passes)
• Snapshots: new share-* screens, plus regenerated popover-notes and note-passwords in all 5 languages
• README: Notes, Privacy and Roadmap
• Site: f6_d in all 5 languages, rebuilt with build-site.py
• CHANGELOG: Unreleased › New
• swift test: 119 tests pass, 6 of them new in SecretShareTests

Not verified

• Not clicked through in an installed build. Double-click only registers once the app is in /Applications.

🤖 Generated with Claude Code