Verrou

Everyday

Fast enough to forget it's there.

A native SwiftUI app on a Rust core, built on Bitwarden's own cryptography. Your vault stays on your server, in the Bitwarden format: the official apps keep working next to it.

⌘

Quick Access, from any app

⌘ ⇧ Space and type: results appear in milliseconds across thousands of items. ⌘ \ fills the app in front of you, even outside the browser.

◎

Touch ID and Face ID

The vault key is sealed by the Secure Enclave. Unlocking takes a glance.

⧉

Browser extension

Brave, Chrome and Firefox: logins, codes, cards and passkeys, only for the site in front of you.

⇄

Shared vaults

Organizations, collections and members, confirmed by fingerprint phrase. Family and team, same app.

✓

Security audit

Weak, reused and breached passwords, passkey upgrades, and duplicates merged into one item.

New

Away from your Mac? Approve from your iPhone.

When the terminal or an AI agent needs a secret while you're away, the request goes to Verrou on your iPhone. Face ID, one tap, done — even if the Mac's vault was locked.

Sealed end to end through your own iCloud account. Your iPhone never sees the vault key, and no server of ours is involved.

›_

Terminal · MacBook

wants to read “GitHub”

Mac locked

📱

Verrou · iPhone

Unlock and read “GitHub” · reason: deploy

Face ID

✓

Terminal

Secret handed to the command, masked

in seconds

Terminal & AI agents

Secrets for your commands, not for your scrollback.

verrou run hands secrets to a command in its environment. They never land in the terminal, its history, or an AI agent's context, and anything the command prints is masked.

Plus an SSH agent that signs with the keys in your vault, and git commit signing. Every secret asks for your approval.

# .env — commit it, there's no secret in it
GITHUB_TOKEN=verrou://GitHub/token
DATABASE_URL=verrou://Production%20DB/url

$ verrou --reason "deploy" run --env-file .env -- ./deploy.sh
Touch ID · or your iPhone if you're away
Deploying with token <concealed by Verrou>
✓ done

$ eval "$(verrou ssh-agent)" && git commit -S

iPhone

The same vault in your pocket.

AutoFill for logins, one-time codes and passkeys in Safari and apps. Scan a two-factor QR code, or set Verrou up to open every setup code link. Liquid Glass on iOS 26.

Verrou on iPhone: an item with its one-time code

Private by design

Nothing to trust but your own server.

No account of ours, no analytics, no tracking. Every connection is documented, with its known limits.

Bitwarden's cryptography, end to end: the vault is decrypted only on your devices.
Secure Enclave keys for Touch ID, Face ID and iPhone approvals.
The extension only receives the logins of the site in front of it, over an encrypted local channel.
Copied secrets are hidden from clipboard managers and cleared after 90 seconds.
The terminal searches without ever seeing a secret; each one asks for your approval.
Open source, GPL-3.0, with a build attestation for every release file.

Read SECURITY.md · Privacy policy

Your vault, native and instant.