Keysafe

Keysafe is a command‑line utility that reads and decrypts legacy Apple Keychain files on Linux, macOS and Windows. It parses the Keychain database, lists encrypted password records, and allows the user to select individual entries or all records for decryption. The tool works with a single executable that can be run from any directory without installation, and it supports simple filtering of results by word or phrase.

The program is intended for technical users who need to access passwords and credentials stored in Apple Keychain files without using a Mac. Decryption requires a Miln App Licence; without it only a truncated preview of the secret is shown, while a licensed copy reveals the full password. The output includes metadata such as creation and modification dates, account name, service and and the decrypted secret.

Keysafe handles legacy Keychain formats but does not yet support the format introduced in macOS 26, which results in padding errors when attempted. It is distributed as part of the Miln App Licence and is classified as stable for core macOS use.