0.1.1 for macOS 26 · every feature free to try
Three guards.One door.
The Mac password manager your Vaultwarden deserves. Native, quick, and yours to try for as long as you like — nothing locked, no trial clock.
v0.1.1 · 11.6 MB · macOS 26 or laterRelease notes
- Works with
- Vaultwarden · Bitwarden US & EU
- Unlock
- Touch ID · PIN · master password
- Price
- Free to try · $19.99 for life
Native
Feels like it shipped
with the Mac.
SwiftUI all the way down: system materials, light and dark, full keyboard control and VoiceOver. Not a web page in a frame.
Every item type, folders, favorites, passkeys and attachments, in one quiet window.
New · Search
One search,
every vault.
Search your own vault and every shared vault at once, and narrow it with filters that stay on: type a token like type:card is:favorite has:passkey #Work, or pick one from the menu. Chips show what’s on; Esc takes them off.
Convenience
The right login,
before you search.
Press ⇧⌘Space over Safari, Chrome or any app and the palette already has that site’s login on top. Hit return and Triwarden types it in — auto-type, without the setup.
In the window it’s ⌘K: every item and every command, a few keystrokes away.
Everywhere on your Mac
Not a website in a box.
All the way into macOS.
- 01
Auto-type
Types your login into any app.
KeePass-style auto-type, built in. Over any page or app, the palette puts its logins first and Return types the username and password for you. Or skip the palette: ⌥⌘\ fills the page you’re on.
↵Type username and password⌃↵Username only⌥↵Password only⇧Add to any of these to submit too⌥⌘\From anywhere: fill the page or app you’re in - 02
Menu bar
One click from any app.
The login for the page you’re on, your favorites with live codes, quick actions and the generator — all in the menu bar.
- 03
Developer tools
Your SSH keys, guarded by Touch ID.
Keep keys in the vault, not in
Read the SSH agent guide~/.ssh. Triwarden answerssshand signs your git commits, one tap at a time. - 04
Automation
Scriptable to the end.
twon the command line, Shortcuts and App Intents, a Safari extension and a Chrome native host. Reading the vault always asks for Touch ID.
Security model
Three locks.
Only you hold the keys.
Zero-knowledge encryption, a hardware-backed unlock and end-to-end sync. Each ring of the dial is one lock on your vault, and all three have to line up before it opens.
Lock one · Your password
Zero-knowledge, by design.
Your master password never leaves the Mac. Keys are derived on-device with PBKDF2 or Argon2id, and the server only ever stores ciphertext it can’t read.
Lock two · Your touch
Hardware-backed unlock.
One press of Touch ID unlocks every account at once. Keys live in the Keychain, guarded by the Secure Enclave — not in a file, not in memory longer than they need to be.
Lock three · Your server
End-to-end, on your terms.
Self-host Vaultwarden, or use Bitwarden cloud in the US or EU. Everything is encrypted before it syncs — live over WebSocket, and readable offline.
Unlocked
All three line up. The vault opens.
On the lock screen the rings turn as you type. When the last one lands in line, the door takes itself apart.
Lightweight
Not a browser
in a box.
- download
- 11.6MB
- of memory at rest
- 138MB
- bundled browser engines
- 0
Download size of the latest release. Memory measured with make bench on an Apple M4 Pro with a 200+ item vault; it varies by Mac.
Generator
Strong by default.
Pronounceable on request.
Passwords, passphrases from the EFF wordlist, and usernames — with a history, so nothing you generated is ever lost.
Security · Watchtower
Find the weak spots.
Give nothing away.
Breached, reused and weak passwords, sites still on http://, and two-step logins you haven’t turned on — each with a button to that site’s change-password page.
Breach checks use Have I Been Pwned’s k-anonymity: five characters of a hash leave your Mac, never the password.
And much more
Everything you’d expect.
Some things you wouldn’t.
AutoFill and passkeys
System AutoFill for passwords, passkeys and one-time codes in Safari, Chrome and apps. A google.com login fills on youtube.com.
Send
Share text or a file through an encrypted link. Edit it later; the link stays the same.
Emergency access
Trusted contacts can view or take over your vault after a wait you choose.
Import from anywhere
1Password, LastPass, KeePass, Bitwarden, Proton Pass, Dashlane, Apple Passwords, Chrome, Firefox.
Many accounts
Self-hosted and cloud side by side. One Touch ID unlocks them all.
Shared vaults
Shared vaults with nested shared folders. Show one vault, several or all of them; event logs for admins.
Works offline
Read everything from the encrypted cache while the server is away.
A clipboard that cleans up
Copied secrets clear themselves, with a countdown in the footer.
Item history
When it changed, and every password it had before.
Bulk actions
⌘-click, ⇧-click or ⌘A, then move, archive or trash them in one go.
Two-step login
Authenticator app, email, recovery codes, and approving sign-ins from your other devices.
Five languages
English, 繁體中文 (台灣 · 香港), 简体中文 and 日本語.
Touch ID or PIN
One touch unlocks every account; a lock timeout for each, or log out instead of lock.
Every shortcut, one page
Help › Keyboard Shortcuts (⌘/) lists every key — in the window, the palette and system-wide.
Accessible
VoiceOver, full keyboard control, Increase Contrast and Reduce Motion.
Pricing
Pay once.
Own it for life.
Try everything for as long as you like. If Triwarden earns its place on your Mac, buy it once — no subscription, no renewal date, every future update included.
Lifetime license
$19.99once, forever
- Yours for life — one payment, forever
- Every future update included
- One license, unlimited Macs
- Card, Alipay, WeChat Pay or PayPal
Until then, official builds show a gentle reminder at most once a week, and once after each update. That’s all.
How it works
- 1DownloadGet the signed app from GitHub, or install it with Homebrew.
- 2Use everythingNo trial clock, nothing greyed out. Take a week or a year.
- 3Buy onceIf it earns its place, $19.99 through Lemon Squeezy. Paste the key and you’re done.
- 4Keep itEvery update after that is yours too. There’s nothing to renew.
Free to try, forever
No trial clock and nothing greyed out. Use every feature until you decide.
Private by design
Registering a receipt key asks Lemon Squeezy once, then never again. Offline keys never leave your Mac. Nothing phones home.
Or build it yourself
The source is GPL-3.0. Clone it, run make, and it’s yours — free, always.
The film
One minute
with the door.
Questions
The fine print,
in large type.
Is anything locked until I pay?
No. Every feature works from the first launch, with no time limit. Unlicensed official builds show a gentle reminder at most once a week, and once after each update.
How many Macs does one license cover?
Every Mac you own — no device limit — for life, with every future update. It’s $19.99, once; there’s nothing to renew.
Does Triwarden phone home?
Only once, and only if you choose to: registering a receipt key asks Lemon Squeezy to confirm it. After that nothing in the app contacts anyone about licensing. Offline license keys never leave your Mac.
Which servers does it work with?
Self-hosted Vaultwarden, and Bitwarden cloud in the US and EU — several accounts at once, all unlocked with one Touch ID.
Can I build it from source?
Yes. Triwarden is free software under the GPL-3.0; building it yourself is always free. Forks need their own name and icon.
How do I pay?
Through Lemon Squeezy, by card, Alipay, WeChat Pay or PayPal.
Ready to give your vault
a proper door?
Download it free and take your time. If it stays, it’s $19.99 — once, for life, on every Mac you own.
$ brew install --cask sinhong2011/tap/triwardenv0.1.1 · 11.6 MB · macOS 26 or laterRelease notes
Requires macOS 26 or later. Updates itself; Homebrew keeps the cask current.