Claspt is now on the
Microsoft Store

Claspt is now available on the Microsoft Store. This is a milestone I have been quietly working toward for months, and it matters for reasons that go beyond distribution — every app on the Store is vetted by Microsoft's certification process, and our store build is a dedicated variant with the auto-updater compiled out at build time. Smaller, quieter, and signed by a publisher Microsoft knows.

What Claspt is, in one paragraph

Claspt is a cross-platform encrypted personal vault that combines markdown note-taking with AES-256-GCM encrypted secret storage. Your notes live in portable .md files. Your passwords, API keys, credit cards, and anything else sensitive live inside those notes as inline :::secret[Label] blocks that get encrypted on save and decrypted only when you reveal them. Nothing on disk is ever plaintext. No cloud lock-in, no proprietary format — you can open a Claspt vault in any text editor and still read the prose around your secrets.

Why the Microsoft Store matters for a security product

For a password manager, being listed on the Microsoft Store is not just another distribution channel. It is a trust signal. Every app on the Store passes Microsoft's certification process, which includes static analysis, malware scanning, and policy review. Publisher identity is verified. Binaries are scanned continuously, not just at submission.

When you install Claspt from the Microsoft Store, you are getting a binary that Microsoft itself has vetted and is actively watching. That is a different assurance from downloading an unsigned executable off a website and clicking through a SmartScreen warning, and for anyone storing their passwords and API keys inside an app, that difference is worth caring about.

A purpose-built Store build

The Microsoft Store version of Claspt is not our regular binary repackaged. It is a dedicated variant with the auto-updater compiled out entirely at build time, not just runtime-disabled. Microsoft handles updates for Store apps, so the update-checking code and its network calls have no business being in the binary. The result is a smaller, quieter app:

• No background update checks
• No update-related network calls at all
• No telemetry of any kind
• Truly local-first — everything stays on your machine unless you explicitly enable sync

Direct-download users still get in-app updates because they need them — there is no Store to push a new version. Store users get updates through the Store itself, which is how Microsoft prefers it and how Store policy actually requires it.

What is in Claspt today

• AES-256-GCM encryption with per-block nonces and Argon2id key derivation
• Markdown-first: your notes are plain .md files with YAML frontmatter
• Secret blocks: encrypted key-value pairs inline in your notes, decrypted only on reveal
• Full-text search via Tantivy on desktop and SQLite FTS5 on mobile
• Git versioning built in — every save is auto-committed, browse history and revert with one click
• Biometric unlock via Touch ID, Face ID, and Windows Hello
• Import from 1Password, LastPass, Bitwarden, RoboForm, KeePass, and plain CSV
• Export to ZIP archive with full vault portability — no lock-in, ever
• Native on every platform: Rust backend, shared crypto and git code across desktop and mobile via UniFFI (new in v1.7.26)

Store vs direct download — which should you use?

If you are on Windows, install from the Microsoft Store. It is the recommended path for three reasons:

1. Verified by Microsoft. The Store binary passes Microsoft's certification and continuous scanning. Our direct-download .msi and .exe are not code-signed yet, so Windows SmartScreen will flag them on first launch. Legitimate software with an unsigned installer looks the same to Windows as malware with an unsigned installer, and we do not want to ask anyone to click through that warning for a password manager.
2. Automatic updates. Microsoft handles Store app updates in the background. You do not have to think about it — new versions arrive silently.
3. Smaller, quieter binary. The Store build has the auto-updater compiled out entirely, so there is less code in the binary and zero background network activity related to updates.

If you still want the direct download (you run a locked-down environment, you want to verify the binary yourself with SHA-256, or you simply prefer not to use the Store), you can grab the .msi or .exe from our download page. Just know that the direct build is unsigned for now, SmartScreen will warn you, and updates are handled by the app itself rather than by Windows.

Where to get Claspt

What is next

This release, v1.7.26, brings the Microsoft Store launch together with a major mobile refactor that moves all crypto, git, and sync code into a shared Rust crate (claspt-core) exposed through UniFFI. Mobile no longer runs any JavaScript crypto — every platform now encrypts and decrypts secrets using the exact same Rust code, audited once. You can read the full release notes on the changelog.

If you have been waiting for Claspt to land on your platform, today is the day. Install it from the Microsoft Store, try it for a week, and tell me what you think.