Apple Passwords

Search and manage Apple Passwords (iCloud Keychain) from Raycast using the APW CLI.

Requirements

1. Install one of APW's supported browsers and the iCloud Passwords extension in that browser:

   • Ungoogled Chromium
   • Google Chrome
   • Brave
   • Microsoft Edge
   • Dia (with an APW version that supports it)

   APW detects supported browsers installed in /Applications; it does not install browsers. Homebrew is one optional way to install them. If you already have Dia installed, for example from a DMG, you do not need to install it again with Homebrew.

   Install the iCloud Passwords extension in the browser APW will use.

2. Install apw via Homebrew and start the daemon:

brew install bendews/tap/apw
brew services start apw

APW launches the selected browser headlessly, so it generally cannot be used for regular browsing while APW is running; a dedicated secondary browser is recommended. To select Dia, use an APW build that supports it and run apw start --browser dia. The Raycast extension connects to the APW daemon, so no browser-specific setup is needed in Raycast.

Commands

Apple Passwords

Search your keychain by URL or domain. Opening the command auto-detects the active browser tab's domain and loads matching logins immediately. You can also type any domain into the search bar manually.

Each result shows which secrets are available as tags — Password is always present, OTP appears for entries that have a one-time code. Actions:

Action	Shortcut	Description
Copy Username	↩	Fill (or copy) the username
Copy Password	⇧↩	Fill (or copy) the password
Copy OTP	⌘⇧↩	Fill (or copy) the current one-time code

If the daemon needs authentication, this command opens Authenticate Apple Passwords automatically.

Save Apple Password

Save a new or updated login. The URL field is pre-filled from your active browser tab and the password field is pre-filled from the clipboard if it contains text.

Built-in password generator (⌘G):

Type	Description
Random	Letters, digits, and symbols — configurable length (default 20)
Alphanumeric	Letters and digits only — configurable length (default 20)
Memorable	4-word hyphenated passphrase
PIN	6-digit numeric PIN

When saving a login detected from the browser, the password is also copied or filled at the cursor (respecting the Copy secrets preference) before the save completes.

Authenticate Apple Passwords

Sends an auth challenge to the APW daemon, which causes macOS to display a PIN. Enter the PIN to authenticate. On success the Apple Passwords search opens automatically.

Preferences

Preference	Default	Description
APW CLI path	/opt/homebrew/bin/apw	Path to the apw binary
Copy secrets	Disabled	Copy secret values to the clipboard; disable to paste at the cursor instead
Cache timeout	5 minutes	How long password list results are cached. Set to 0 to disable caching