macOS app

The macOS app is a menu bar item and one window. It lets you sign in, unlock E2E folders, search, view items and copy values. It also runs the local agent that the command line and the browser extensions use. It carries its own copy of lasbolt.

There is no store release or signed download yet. You build the app from source with Xcode and install it with make. The app is for Apple silicon (arm64) only.

What you need

A Mac with Apple silicon, Xcode and xcodegen.
An Apple Development certificate. A free Personal Team is enough. make reads the team from the first certificate that it finds. To set it by hand, copy apple/Local.xcconfig.example to apple/Local.xcconfig and set DEVELOPMENT_TEAM.
Go and make.

Install

make install

This installs lasbolt in ~/.local/bin and the app in ~/Applications/Lasbolt.app. To install the app alone, run make install-app. To remove both, run make uninstall. Your data and login stay. Use lasbolt logout to remove them.

Two builds

Build	Command	Touch ID	Expires
Default	`make install`	Hidden	Never
Touch ID	`make install TOUCHID=1`	Yes	After 7 days. Build it again.

The Touch ID build needs a provisioning profile. A free team gives a profile that lives 7 days. After that, the whole app does not start until you build it again. Choose the default build if you do not want this.

What a free team cannot do

The system AutoFill of macOS and passkeys need the paid Apple Developer Program. Signing for other people and notarization need it too. So the app has no system AutoFill. Use the Safari extension or a Chrome or Firefox extension.

Sign in

Open the app

Open ~/Applications/Lasbolt.app. The Lasbolt icon shows in the menu bar.

Choose how to sign in

The window asks for the server address. Then choose one:

Continue in Browser. The app opens a page on your server. Check that the page shows the same code as the app. Approve there. This session can read and ends after 24 hours.
Use Master Password. Type your user name and master password. This Mac becomes a device of your account with full access.

Use “Allow plain http” only for a test server.

Unlock E2E folders

E2E folders show with a lock. Use “Unlock…” and type your master password.

A sign-in from the app is also the sign-in of the lasbolt command in the terminal. They share one agent.

Use the app

Menu bar window. It has a search field, and it shows your items. Use the buttons on an item to copy the user name, the password or the one-time code. A copied value leaves the clipboard after 30 seconds. The menu also has “Add a phone…”, “Approve requests in the web app”, “Open Lasbolt”, “Settings…” and “Quit Lasbolt”.
Main window. It shows spaces, folders and items. An item shows its fields, with secrets hidden until you reveal them. The app is read only: it does not make or change items. Use the web app or lasbolt for that.
Lock. The lock button drops the E2E keys. Items in normal folders stay visible. Each program of your user can read them through the agent, so a lock screen would not protect them.

Approvals

An item can ask before each use. If you copy a secret of such an item, the app waits and shows “needs an approval in the Lasbolt web app”. Approve in the web app. The app has no approval card yet. See Devices and approvals.

Settings

Open Settings from the menu (⌘,).

Tab	What it has
General	“Open Lasbolt at login”, “Allow plain http for a new sign-in”, and the server address (read only)
Account	The user, the type of sign-in, and “Sign Out…”
Browsers	The steps for Safari, and “Set up” or “Remove” for Chrome and Firefox
Security	“Unlock with Touch ID” (Touch ID build only) and the idle lock

At login the app starts the agent and the menu bar item. It does not open the Touch ID prompt by itself at login.

Touch ID

Touch ID build

Touch ID opens the E2E folders without the master password.

Open Settings, then Security, and turn on “Unlock with Touch ID”.
Type your master password once, then confirm with Touch ID.

Rules:

It works only for a sign-in with the master password. A browser sign-in has no key for it.
A new fingerprint turns it off. Lasbolt then asks for the master password and sets it up again.
Lasbolt asks for the master password every 14 days, and after a new master password.
In the default build, Settings says that Touch ID needs the Touch ID build.

Idle lock

In Settings, Security, choose after how many minutes without input the app locks the E2E folders: 1, 5, 15 (the default), 30, 60 or Never. The app also locks when the Mac sleeps and when the screen locks. After a lock, a browser sign-in must sign in again, because its temporary key is gone.

Safari

Open Safari, then Settings, then Extensions.
Turn on Lasbolt.
Allow it on all websites, or on the sites that you choose.

The button “Open Safari Extensions Settings” in Settings, Browsers, opens this page. A free-team build works in Safari. See Browser extensions.

Last updated on 2026-10-21

Web app iOS app