Credential-Zugriff
Can read passwords, notes, tokens, and vault metadata after unlock.
brew
Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für bitwarden-cli in AI-Agent-Workflows.
Agent-Sicherheit
bitwarden-cli accesses vault items and secrets from local workflows.
Can read passwords, notes, tokens, and vault metadata after unlock.
Can create, edit, delete, and sync vault items.
Can export secrets into files or downstream release commands.
Gate item reads, exports, unlock, and mutations.
Allow metadata-only operations; require approval for secret retrieval, export, and item changes.
Installation
brew install bitwarden-clilocal Homebrew formula metadata
sudo port install bitwarden-cliMacPorts ports tree · security/bitwarden-cli/Portfile · Quelle: api.github.com
nix profile install nixpkgs#bitwarden-clinixpkgs package indexes · pkgs/by-name/bi/bitwarden-cli/package.nix · Quelle: api.github.com
sudo pacman -S bitwarden-cliArch Linux sync databases · bitwarden-cli · Quelle: geo.mirror.pkgbuild.com
choco install bitwarden-cliChocolatey community package catalog · bitwarden-cli · Quelle: community.chocolatey.org
scoop install main/bitwarden-cliScoop official bucket manifest trees · bucket/bitwarden-cli.json · Quelle: api.github.com
winget install --id Bitwarden.CLI -eWindows Package Manager source index · Bitwarden.CLI · Quelle: cdn.winget.microsoft.com
Überblick
Secure and free password manager for all of your devices
Verlauf
Bitwarden CLI, invoked as bw, is the command-line client for Bitwarden Password Manager. Official docs describe it as a full-featured vault-management tool whose features mostly parallel Bitwarden's desktop and browser clients.
The package is significant because it puts an end-to-end encrypted password manager into shell scripts, CI jobs, server migration workflows, and terminal-first daily use.
The Bitwarden clients repository was created in 2016 and houses the web, browser extension, desktop, and CLI clients, with mobile clients split into separate iOS and Android repositories.
By the 2020s, the CLI had dedicated release tags in the clients repository, including cli-v2022.6.0 and continuing through cli-v2026.6.0. Bitwarden's CLI docs now document native executable downloads, npm installation, Chocolatey, Snap, Flatpak use through the desktop app, and GitHub checksums.
The input package-manager data shows broad package adoption across Homebrew, Chocolatey, MacPorts, Nix, Arch, Scoop, and winget. The official docs also list npm, Chocolatey, Snap, native executables, and Flatpak-mediated use.
Bitwarden's own help center positions the CLI for interactive login, API-key login, SSO login, server geography selection, and self-hosted deployments, which explains its reach beyond personal password lookup into business and automation workflows.
Typical CLI use starts with bw login, then bw unlock to generate a session key for commands that touch encrypted vault data. Official docs also document API-key login through BW_CLIENTID and BW_CLIENTSECRET environment variables for automated work.
The CLI can list, get, edit, generate, encode, import, export, and serve vault data. Package users care about the serve mode and raw/JSON output options because they let local tools consume vault data without binding to Bitwarden's GUI clients.
Bitwarden documents BITWARDENCLI_APPDATA_DIR for separate data.json configurations, which lets users keep multiple accounts or environments isolated.
bitwarden-cli is one of the canonical examples of a security GUI product with a serious command-line surface. It lets package managers deliver a password-vault client into headless machines and scripted environments without requiring a desktop app.
Its package story is also interesting because the official docs distinguish OSS and non-OSS CLI bundles on GitHub while common distribution platforms carry the default build. That distinction matters to users who audit package provenance.
For shell users, bw is a bridge between human secret storage and automation: strong enough for personal use, but scriptable enough for infrastructure migration and controlled retrieval.
Sicherheitslage
Für bitwarden-cli wurde kein passendes lokales Secret-Handling-Manifest gefunden. Nucleus-Paketmetadaten bleiben hier veröffentlicht, damit künftige Abdeckung eine stabile Paket-URL hat.
Prüfe vor unbeaufsichtigter Agent-Nutzung, ob das Tool Klartext-Credentials liest, Remote-Zustand schreibt, Artefakte veröffentlicht oder Plugins ausführt.
local files
These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.
Credential-bearing paths to review before unattended agent runs.
~/Library/Application Support/Bitwarden CLI/data.jsonExecutables
| Befehl | Art | Sichtbarkeit | Hinweis |
|---|---|---|---|
bw | cli | globales Executable |
Aktualität
Diese Signale trennen das Alter der Seitengenerierung, Aktivität des Paketmanagers und Upstream-Release-Vergleich. Versionsrückstand wird nur gemeldet, wenn eine Evidenz-URL und vergleichbare Versionen vorhanden sind.
https://github.com/bitwarden/clients
Installationsmetadaten
| Paketschlüssel | brew:bitwarden-cli |
|---|---|
| Version | 2026.6.0 |
| Paketmanager | Homebrew |
| Paketmanager-Seite | https://formulae.brew.sh/formula/bitwarden-cli |
| Homepage | https://bitwarden.com/ |
| Repository | https://github.com/bitwarden/clients |
| Upstream-Dokumentation | https://bitwarden.com |
| Lizenz | GPL-3.0-only |
| Quellarchiv | https://github.com/bitwarden/clients/archive/refs/tags/cli-v2026.6.0.tar.gz |
| Zuletzt aktualisiert | 2026-06-25T21:14:47Z |
| Pulse | updated |
| Abhängigkeiten | node |
| Bottle | verfügbar (auf all) |
| Homebrew post-install | nicht definiert |
| Dienst | keiner deklariert |
Registry-Fakten
| Source Database | Homebrew formula API |
|---|---|
| Tap | homebrew/core |
| Full Name | bitwarden-cli |
| Version Scheme | 0 |
| Revision | 0 |
| Head Version | HEAD |
| Bottle Stable Root URL | https://ghcr.io/v2/homebrew/core |
| Deprecated | no |
| Disabled | no |
| Keg Only | no |
| URL Keys |
|
Source-Datenbank-Treffer
Treffer stammen aus externen Paketmanager-Indizes und bleiben von lokalen Automic-Vault-Paketlinks getrennt.
bitwarden-cli
nix profile install nixpkgs#bitwarden-clibitwarden-cli 2026.2.0-1
The command line vault
https://github.com/bitwarden/clients
sudo pacman -S bitwarden-clibitwarden-cli
sudo port install bitwarden-clibitwarden-cli
choco install bitwarden-climain/bitwarden-cli
scoop install main/bitwarden-cliBitwarden.CLI
winget install --id Bitwarden.CLI -eQuellspur
Diese Seite wird von av-web aus dem privaten Paket-SQLite-Artefakt bereitgestellt, das scripts/generate-pkg-sqlite.py erstellt.
View the package source record on GitHub.