Search and manage Apple Passwords (iCloud Keychain) from Raycast using the APW CLI.
apw via Homebrew and start the daemon:brew install bendews/tap/apw
brew services start apw
Search your keychain by URL or domain. Opening the command auto-detects the active browser tab's domain and loads matching logins immediately. You can also type any domain into the search bar manually.
Each result shows which secrets are available as tags — Password is always present, OTP appears for entries that have a one-time code. Actions:
| Action | Shortcut | Description |
|---|---|---|
| Copy Username | ↩ | Fill (or copy) the username |
| Copy Password | ⇧↩ | Fill (or copy) the password |
| Copy OTP | ⌘⇧↩ | Fill (or copy) the current one-time code |
If the daemon needs authentication, this command opens Authenticate Apple Passwords automatically.
Save a new or updated login. The URL field is pre-filled from your active browser tab and the password field is pre-filled from the clipboard if it contains text.
Built-in password generator (⌘G):
| Type | Description |
|---|---|
| Random | Letters, digits, and symbols — configurable length (default 20) |
| Alphanumeric | Letters and digits only — configurable length (default 20) |
| Memorable | 4-word hyphenated passphrase |
| PIN | 6-digit numeric PIN |
When saving a login detected from the browser, the password is also copied or filled at the cursor (respecting the Copy secrets preference) before the save completes.
Sends an auth challenge to the APW daemon, which causes macOS to display a PIN. Enter the PIN to authenticate. On success the Apple Passwords search opens automatically.
| Preference | Default | Description |
|---|---|---|
| APW CLI path | /opt/homebrew/bin/apw | Path to the apw binary |
| Copy secrets | Disabled | Copy secret values to the clipboard; disable to paste at the cursor instead |
| Cache timeout | 5 minutes | How long password list results are cached. Set to 0 to disable caching |