Strongroom, an unofficial Bitwarden client

Strongroom is a desktop app, browser extension, Raycast extension and command line for a Bitwarden vault you already have. It does not replace your account, and it does not store your vault. The official bw CLI signs in, syncs and does all the vault cryptography.

It is not made by Bitwarden and not endorsed by Bitwarden. Bitwarden is a trademark of Bitwarden, Inc. It is a fork of dillionverma/bitlatch, MIT licensed.

Install from source See the feature list

What it adds on top of bw

• One-time codes (TOTP and Steam Guard) in the desktop item view, the browser popup and strongroom totp. See Bitwarden TOTP code viewer.
• Vault health: reused, weak and plain http:// logins, plus two opt-in checks. See Bitwarden vault health report from the command line.
• Folders, custom fields, password history, cards, identities and SSH keys in the desktop editor.
• Attachments and file Sends, passed through bw. The server decides if your account may use them.
• Password, passphrase and username generators. Import and export through bw.

What it does not do

It does not unlock anything your Bitwarden server withholds. Attachments, file Sends and emergency access are decided server side. Strongroom asks bw, then shows the answer. Organizations, single sign-on, master password changes and the admin console are not built, and a client on top of bw cannot build them. The full list is on the parity page.

Check it yourself

git clone https://github.com/bodencrouch/strongroom
cd strongroom
grep -rn "fetch(" apps packages --include=*.ts --include=*.tsx --exclude-dir=node_modules

That grep finds the outbound network calls in source. Privacy and network use lists each one, what it sends and whether it is on by default.

Where to go next

• Install: build from source with pnpm. No release is tagged yet.
• Security model: what the window process never receives.
• FAQ: is it official, is it safe, why not just use Bitwarden.