# Install keysafe with Homebrew Cask

Read and decrypt Apple Keychain files. Version 1.9.2 via Homebrew Cask; verified from local package data.

## Install

```sh
sudo av install cask:keysafe
```

Additional install commands:

### macOS

- Homebrew Cask (100%):

```sh
brew install --cask keysafe
```

  Evidence: local Homebrew cask metadata

## Package facts

- **Package key:** cask:keysafe
- **Package manager:** Homebrew Cask
- **Version:** 1.9.2
- **Source summary:** Read and decrypt Apple Keychain files
- **Homepage:** <https://miln.eu/keysafe>
- **Generated:** 2026-08-03T19:37:03+00:00

## Executables

- keysafe (binary)
- keysafe (alias)

## Install behavior

- Bottle: not available

## Freshness

- Page generated: 2026-08-03
- Package-manager version: 1.9.2
## Project history and usage

Miln Keysafe is a proprietary command-line utility from Miln for reading and decrypting legacy Apple Keychain files on Linux, macOS, and Windows. Its niche is portability: it lets users inspect or export Keychain data without using Apple's Keychain Access application on Apple hardware.

### Project history

The public Miln documentation describes Keysafe as a single executable for reading Keychain files, looking up encrypted password records, exporting Keychain contents, and extracting password-recovery material. The package is distributed from Miln rather than through a public source repository, so detailed development history is not visible from source-control metadata.

### Adoption history

Homebrew Cask packages Keysafe for macOS users who prefer package-manager installation of a standalone binary. Beyond that packaging signal and Miln's product page, evidence of broad open-source ecosystem adoption is thin.

### How it is used

Keysafe is used from a terminal with a Keychain file path, can filter listed records, can export decrypted Keychain contents to archive formats, and requires the Keychain password to decrypt protected data. Miln documents System.keychain handling through a SystemKey file and password input through an interactive prompt, environment variable, or user-specified file.

Miln documents Keysafe output suitable for importing password records into Bitwarden, Vaultwarden, Apple Passwords, and other software, along with exported certificates, private keys, public keys, and secure notes.

### Why package nerds care

For package-history purposes, Keysafe is interesting because it packages a narrow forensic and migration workflow - legacy Apple Keychain file access - as a cross-platform CLI binary rather than a macOS-only GUI workflow.

### Timeline

- 2022: Sample output in Miln's documentation shows Keychain record creation and modification dates in April 2022.
- 2026: Input metadata records Homebrew Cask version 1.9.2 for this batch.

### Related projects

- Apple Keychain Access and the macOS `security` command cover native macOS Keychain workflows; Bitwarden and Vaultwarden are documented export targets for Keysafe's Bitwarden-format JSON output.

### Sources

- <https://miln.eu/keysafe/>
- <https://miln.eu/keysafe/download/>
- <https://miln.eu/keysafe/format/>
- <https://miln.eu/keysafe/recover/>
- <https://miln.eu/keysafe/system-keychain/>
- source_facts.package-manager
- source_facts.version


## Security Notes

No matching local secret-handling manifest was found for keysafe. Nucleus package metadata is still published here so future coverage has a stable package URL.



## Combined YAML source

View the package source record on GitHub. [combined/keysafe.yml](https://github.com/mxcl/pkgdb/blob/main/combined/keysafe.yml)


## Sources

- pkg.so package database
- curated package history
- pkgdb category and tag curation
- cross-ecosystem install command graph