Penwright
All features

Vault

Keys and credentials, encrypted on your Mac

API keys, licence codes and the passwords you paste into terminals, kept in an encrypted local store. Sharing one with a teammate is end-to-end encrypted.

macOS 13+, Apple Silicon
Vault in Penwright for Mac

Encrypted at rest

The vault is encrypted on disk and unlocked on your machine, not on a server that holds everyone's secrets.

Sharing the relay cannot read

A shared item is encrypted for the recipient's key before it leaves. The relay only ever holds ciphertext.

Paste by voice

Ask for the staging key and it is inserted where your cursor is, without opening another app.

Nothing leaves your Mac

Transcription and cleanup run on your machine. The Penwright API only handles your account, subscription and licence. There is no endpoint that accepts text or audio.

How privacy works

Recall and act

Goes with this