Instant recall
Open the popover, type two letters, hit return. Your key is on the clipboard before the window finishes fading in.
Native macOS & Windows
Your keys, one keystroke away.
A native vault that lives quietly in your menu bar. Hardware-backed storage, biometric unlock, and your API keys on the clipboard in a blink.
Try it — click a key to copy
Out of sight.
Never out of reach.
No dock icon, no window, no clutter. Keyholdr sits beside your clock and opens with a click — or ⌃⌥⌘K from anywhere. Search, copy, gone.
Smart mapping
Platform names resolve to icons and themes automatically — GitHub, AWS, Stripe, Anthropic — no manual organizing.
Auto-lock
Click away and the popover vanishes and locks. Nothing lingers on screen, nothing stays decrypted.
Featherweight
Pure SwiftUI. Under 1 MB, negligible memory, zero Chromium.
Always on duty
Starts at login and survives reboots — toggle it off in one click if you'd rather it didn't.
Moves with you
Export the whole vault to one passphrase-encrypted file and import it on your next machine. No cloud required.
Hardware-backed.
Nothing in cleartext.
Metadata and secrets never travel together. Names and labels live in a local file — the secrets themselves go straight into the operating system's hardware-backed vault and never touch the disk in cleartext.
-
2.1
System vaults only
Secrets are written straight to your OS's hardware-backed credential store — macOS Keychain Services or Windows Credential Manager — encrypted by the OS.
-
2.2
Biometric gate
Touch ID, Apple Watch, or Windows Hello is required before any secret is decrypted. Physical presence, every time.
-
2.3
Strictly local
No servers, no sync, no analytics, no network calls. Your keys never leave the machine.
-
2.4
Self-healing
The key list mirrors itself into the OS vault. Delete the app, its files, or both — reinstall and everything is still there.
-
2.5
Privacy nutrition label
Keyholdr declares no data collected on the Mac App Store. No identifiers, no usage data, no diagnostics — nothing leaves your device.
Built native.
Down to the byte.
StackSwift 6 · SwiftUI (macOS) · C# 12 · WPF (Windows)
FormMenu bar / system tray accessory
VaultKeychain Services (macOS) · Credential Manager (Windows)
UnlockTouch ID · Apple Watch (macOS) · Windows Hello (Windows)
Summon⌃⌥⌘K system-wide (macOS) · tray icon (Windows)
BackupPassphrase-encrypted export · AES-256-GCM (macOS)
Terminalkeyholdr get · keyholdr run — Touch ID-gated CLI (macOS)
Footprint~680 KB (macOS) · self-contained .exe (Windows)
The Windows app covers the core vault — tray popover, Credential Manager storage, and Windows Hello unlock. The export/backup format and CLI companion are macOS-only for now and are next up for Windows.
Get Keyholdr
Free · no account, ever