Automic VaultAutomic Vault

brew

bitwarden-cli mit Homebrew, chocolatey, MacPorts, Nix, pacman, scoop, winget installieren

Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für bitwarden-cli in AI-Agent-Workflows.

Agent-Sicherheit

Antwort zur Agent-Sicherheit

bitwarden-cli accesses vault items and secrets from local workflows.

Credential-Zugriff

Can read passwords, notes, tokens, and vault metadata after unlock.

Änderungen an Remote-Zustand

Can create, edit, delete, and sync vault items.

Publish-/Artefakt-Risiko

Can export secrets into files or downstream release commands.

Empfohlene Kontrolle

Gate item reads, exports, unlock, and mutations.

Hinweise für Agent-Nutzung

Allow metadata-only operations; require approval for secret retrieval, export, and item changes.

Installation

Weitere Installationsbefehle

macOS

Homebrewverifiziert · 100%
brew install bitwarden-cli

local Homebrew formula metadata

MacPortsverifiziert · 94%
sudo port install bitwarden-cli

MacPorts ports tree · security/bitwarden-cli/Portfile · Quelle: api.github.com

Linux

Nixverifiziert · 92%
nix profile install nixpkgs#bitwarden-cli

nixpkgs package indexes · pkgs/by-name/bi/bitwarden-cli/package.nix · Quelle: api.github.com

Arch Linux pacmanverifiziert · 92%
sudo pacman -S bitwarden-cli

Arch Linux sync databases · bitwarden-cli · Quelle: geo.mirror.pkgbuild.com

Windows

Chocolateyverifiziert · 92%
choco install bitwarden-cli

Chocolatey community package catalog · bitwarden-cli · Quelle: community.chocolatey.org

Scoopverifiziert · 92%
scoop install main/bitwarden-cli

Scoop official bucket manifest trees · bucket/bitwarden-cli.json · Quelle: api.github.com

Windows Package Managerverifiziert · 92%
winget install --id Bitwarden.CLI -e

Windows Package Manager source index · Bitwarden.CLI · Quelle: cdn.winget.microsoft.com

Überblick

Paketzusammenfassung

Secure and free password manager for all of your devices

Verlauf

Projektgeschichte und Nutzung

Bitwarden CLI, invoked as bw, is the command-line client for Bitwarden Password Manager. Official docs describe it as a full-featured vault-management tool whose features mostly parallel Bitwarden's desktop and browser clients.

The package is significant because it puts an end-to-end encrypted password manager into shell scripts, CI jobs, server migration workflows, and terminal-first daily use.

Projektgeschichte

The Bitwarden clients repository was created in 2016 and houses the web, browser extension, desktop, and CLI clients, with mobile clients split into separate iOS and Android repositories.

By the 2020s, the CLI had dedicated release tags in the clients repository, including cli-v2022.6.0 and continuing through cli-v2026.6.0. Bitwarden's CLI docs now document native executable downloads, npm installation, Chocolatey, Snap, Flatpak use through the desktop app, and GitHub checksums.

Adoptionsgeschichte

The input package-manager data shows broad package adoption across Homebrew, Chocolatey, MacPorts, Nix, Arch, Scoop, and winget. The official docs also list npm, Chocolatey, Snap, native executables, and Flatpak-mediated use.

Bitwarden's own help center positions the CLI for interactive login, API-key login, SSO login, server geography selection, and self-hosted deployments, which explains its reach beyond personal password lookup into business and automation workflows.

Wie es verwendet wird

Typical CLI use starts with bw login, then bw unlock to generate a session key for commands that touch encrypted vault data. Official docs also document API-key login through BW_CLIENTID and BW_CLIENTSECRET environment variables for automated work.

The CLI can list, get, edit, generate, encode, import, export, and serve vault data. Package users care about the serve mode and raw/JSON output options because they let local tools consume vault data without binding to Bitwarden's GUI clients.

Bitwarden documents BITWARDENCLI_APPDATA_DIR for separate data.json configurations, which lets users keep multiple accounts or environments isolated.

Warum Paket-Nerds sich dafür interessieren

bitwarden-cli is one of the canonical examples of a security GUI product with a serious command-line surface. It lets package managers deliver a password-vault client into headless machines and scripted environments without requiring a desktop app.

Its package story is also interesting because the official docs distinguish OSS and non-OSS CLI bundles on GitHub while common distribution platforms carry the default build. That distinction matters to users who audit package provenance.

For shell users, bw is a bridge between human secret storage and automation: strong enough for personal use, but scriptable enough for infrastructure migration and controlled retrieval.

Zeitleiste

  • 2016: bitwarden/clients repository created.
  • 2022-07-05: cli-v2022.6.0 release published in the clients repository.
  • 2024: Official CLI docs reference OSS and non-OSS bundle naming examples such as bw-oss-windows-2024.12.0.zip and bw-windows-2024.12.0.zip.
  • 2026-06-25: cli-v2026.6.0 release published.

Related projects

  • bitwarden/server provides the backend infrastructure for Bitwarden.
  • bitwarden/ios and bitwarden/android provide the mobile clients outside the clients monorepo.
  • bitwarden/directory-connector supports enterprise directory synchronization.
  • Bitwarden Secrets Manager is a related Bitwarden product for machine secrets, but it is distinct from the Password Manager CLI.

Sicherheitslage

Noch keine Protected-Tool-Abdeckung gefunden

Für bitwarden-cli wurde kein passendes lokales Secret-Handling-Manifest gefunden. Nucleus-Paketmetadaten bleiben hier veröffentlicht, damit künftige Abdeckung eine stabile Paket-URL hat.

Installationsverhalten

  • In den Formelmetadaten ist kein Homebrew-Post-install-Hook erfasst.
  • Homebrew-Bottle-Metadaten sind für 1 Plattformziele verfügbar.
  • Installiert mit 1 Laufzeitabhängigkeiten.

Empfohlene Prüfung

Prüfe vor unbeaufsichtigter Agent-Nutzung, ob das Tool Klartext-Credentials liest, Remote-Zustand schreibt, Artefakte veröffentlicht oder Plugins ausführt.

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Credential files

Credential-bearing paths to review before unattended agent runs.

macOS
~/Library/Application Support/Bitwarden CLI/data.json

Executables

Installierte Executables

BefehlArtSichtbarkeitHinweis
bwcliglobales Executable

Aktualität

Version und Aktualität

Diese Signale trennen das Alter der Seitengenerierung, Aktivität des Paketmanagers und Upstream-Release-Vergleich. Versionsrückstand wird nur gemeldet, wenn eine Evidenz-URL und vergleichbare Versionen vorhanden sind.

Seite generiert2026-07-10
Manager-Version2026.6.0
Manager aktualisiert2026-06-25
lokale DatenOK
Upstreamnot checked
neueste erkannte Versionnicht erkannt

https://github.com/bitwarden/clients

Installationsmetadaten

Paketmetadaten

Paketschlüsselbrew:bitwarden-cli
Version2026.6.0
PaketmanagerHomebrew
Paketmanager-Seitehttps://formulae.brew.sh/formula/bitwarden-cli
Homepagehttps://bitwarden.com/
Repositoryhttps://github.com/bitwarden/clients
Upstream-Dokumentationhttps://bitwarden.com
LizenzGPL-3.0-only
Quellarchivhttps://github.com/bitwarden/clients/archive/refs/tags/cli-v2026.6.0.tar.gz
Zuletzt aktualisiert2026-06-25T21:14:47Z
Pulseupdated
Abhängigkeitennode
Bottleverfügbar (auf all)
Homebrew post-installnicht definiert
Dienstkeiner deklariert

Registry-Fakten

Details aus der Quelldatenbank

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Namebitwarden-cli
Version Scheme0
Revision0
Head VersionHEAD
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • head
  • stable

Source-Datenbank-Treffer

Andere Paketmanager-Einträge

Treffer stammen aus externen Paketmanager-Indizes und bleiben von lokalen Automic-Vault-Paketlinks getrennt.

Nix95%

bitwarden-cli

nix profile install nixpkgs#bitwarden-cli
  • normalized package name match
  • Abgeglichen nach: Bitwarden Cli
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/bi/bitwarden-cli/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
pacman95%

bitwarden-cli 2026.2.0-1

The command line vault

https://github.com/bitwarden/clients

sudo pacman -S bitwarden-cli
  • License: GPL-3.0-only
  • Architecture: x86_64
  • 3 Abhängigkeiten
  • normalized package name match
  • Abgeglichen nach: Bitwarden Cli
Arch Linux sync databases · geo.mirror.pkgbuild.com · Arch Linux sync databases: bitwarden-cli from https://geo.mirror.pkgbuild.com/extra/os/x86_64/extra.db.tar.gz
MacPorts95%

bitwarden-cli

sudo port install bitwarden-cli
  • normalized package name match
  • Abgeglichen nach: Bitwarden Cli
MacPorts ports tree · api.github.com · MacPorts ports tree: security/bitwarden-cli/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1
Chocolatey95%

bitwarden-cli

choco install bitwarden-cli
  • normalized package name match
  • Abgeglichen nach: Bitwarden Cli
Chocolatey community package catalog · community.chocolatey.org · Chocolatey community package catalog: bitwarden-cli from http://community.chocolatey.org/api/v2/Packages?$filter=IsLatestVersion&$select=Id&$top=1000&$skiptoken='11','backupper-standard'
Scoop95%

main/bitwarden-cli

scoop install main/bitwarden-cli
  • normalized package name match
  • Abgeglichen nach: Bitwarden Cli
Scoop official bucket manifest trees · api.github.com · Scoop official bucket manifest trees: bucket/bitwarden-cli.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1
winget95%

Bitwarden.CLI

winget install --id Bitwarden.CLI -e
  • normalized package name match
  • Abgeglichen nach: Bitwarden Cli
Windows Package Manager source index · cdn.winget.microsoft.com · Windows Package Manager source index: Bitwarden.CLI from https://cdn.winget.microsoft.com/cache/source.msix

Quellspur

Aus Repository-Daten generiert

Diese Seite wird von av-web aus dem privaten Paket-SQLite-Artefakt bereitgestellt, das scripts/generate-pkg-sqlite.py erstellt.

Verwendete Quellen

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated agent safety answer
  • curated configuration and credential file locations
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment