Goldwarden is a Bitwarden compatible desktop client. It focuses on providing useful desktop features that the official tools do not (yet) have or are not willing to add, and enhanced security measures that other tools do not provide, such as:
- Support for SSH Agent (Git signing and SSH login)
- System wide autotype (Linux - Gnome, KDE only for now)
- Biometric authentication
- Implements Bitwarden browser-extension biometrics on Linux
- Support for injecting environment variables into the environment of a cli command
- Vault content is held encrypted in memory and only briefly decrypted when needed
- Kernel level memory protection for keys (via the memguard library)
- Additional measures to protect against memory dumps
- Passwordless login (Both logging in, and approving logins)
- Fido2 (Webauthn) support
- more to come...?
The aim is not to replace the official clients, but to complement by implementing the missing features.
Right now, Goldwarden is only tested on Linux. Somewhat feature-stripped builds for Mac and Windows are available too, but untested. Autotype is currently implemented via the remotedesktop portal. This is supported on KDE and Gnome, but not yet on wl-root based environments.
There is a flatpak that includes a small UI, autotype functionality and autostarting of the daemon.
![](https://private-user-images.githubusercontent.com/11866552/306512934-88adefe4-90bc-4a77-b749-3c89a6bba7cd.png?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.AoJqHJV09IKUC-WSMKGzQyfvZUG0XWrbbG9KKVuI7As)
![](https://private-user-images.githubusercontent.com/11866552/306512942-f6dfd24b-3cf4-4ce3-b504-c9bdf673e086.png?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.spXPJ_sPWeypPOSU6kqSA6xwEQlJaRJBaqgB0m52dJ4)
On Arch linux, or other distributions with access to the AUR, simply:
yay -S goldwarden
should be enough to install goldwarden on your system.
For deb/rpm, download the deb/rpm from the latest release on GitHub and install it using your package manager.
On other distributions, Mac and Windows, you can download it from the latest release on GitHub and put it into a location you want to have it in, f.e /usr/bin
.
Alternatively, you can build it yourself.
go install github.com/quexten/goldwarden@latest
To get started, follow the instructions provided in the wiki https://github.com/quexten/goldwarden/wiki/Getting-Started. For instructions on specific features, also consult the wiki page for the feature.
Interested in contributing a feature or bug-fix? Great! Here is some information on how to set up your development environment:
https://github.com/quexten/goldwarden/wiki/Setting-up-the-Development-Environment
After that, create a PR. If you encounter any issues, feel free to open a discussion thread.