Keywise

Reads a Firefox profile's saved logins with no dependencies.

A Zig core reads key4.db and logins.json, then decrypts the passwords. That core holds the SQLite parser and the AES-256-CBC unwrap. It links no libsqlite3 and no NSS. It backs a libvaxis terminal UI on macOS and Linux, a SwiftUI app on macOS and a Win32 app on Windows.

The terminal UI listing five logins with masked passwords, one revealed, and the confirmation prompt on the Firefox Accounts row — the cross-platform terminal UI

The macOS app listing the same five logins, each with a copy button, and icons marking the Firefox Accounts row and the extension row — the macOS app

The Windows app listing the same five logins in a report-view list, with the second row selected and its password revealed, and the status bar showing the login count — the Windows app

What it does

decrypts passwords itself without requiring Mozilla's NSS crypto library. The unwrap is AES-256-CBC under PBKDF2, done in pbes2.zig and aescbc.zig.
builds for macOS, Windows and Linux from one codebase. Reads the SQLite file format directly, so the core links no libsqlite3.
gives each platform its own native interface. A terminal UI on libvaxis, a macOS app in SwiftUI, and a Windows app in Win32. All three read through the same core.
proves the binary reading your passwords is built from this source. Fully reproducible builds, CI packages the Linux tarballs, the macOS keywise tarball, and the Windows zips twice from a clean build and diffs them bit for bit. The macOS app zip gets its own check: two separate runners package it, and a mismatch between their hashes stops the release before upload. Details are in docs/REPRODUCIBLE.md.
handles old and new Firefox password formats automatically. Firefox 144 added an AES-256 key beside the older 3DES key. This picks whichever key decrypts to a valid length.
runs on any Linux distro from a single download. Built statically with musl, so it needs no shared C library installed.
keeps passwords hidden until you choose to look. In the TUI, enter reveals the selected row. y copies it with nothing shown on screen.
keeps a copied password out of your clipboard history. Marks the copy so a clipboard manager skips it. On Windows that covers Win+V history and the cloud clipboard.
clears the clipboard automatically after use. Clears it 30 seconds after a copy, and only if the password is still on the clipboard.
double-checks before exposing your account's sync password. Asks a second time before the Firefox Accounts row (chrome://FirefoxAccounts), since that password is the sync key for the whole account.

Install

brew tap lkraider/keywise https://github.com/lkraider/keywise
brew install lkraider/keywise/keywise             # the terminal UI
brew install --cask lkraider/keywise/keywise-app  # the macOS app

The app is ad-hoc signed, so Gatekeeper blocks a first launch. Right-click it in Finder and choose Open. Clearing the quarantine flag works too: xattr -cr /Applications/Keywise.app

keywise-x86_64-linux.tar.gz
keywise-aarch64-linux.tar.gz

On Linux, download the file for your architecture, then tar -xzf it. The binary is static, so it runs on any distro.

Keywise-<version>-windows-arm64.zip
Keywise-<version>-windows-x86_64.zip

On Windows, download the file for your architecture from the latest release and unzip it. It is unsigned, so SmartScreen shows a warning on first launch. Choose More info, then Run anyway.