Display Bitwarden vault status with interactive password and TOTP selectors for secure credential management.

󰿆 Locked
󰿆 Unlocked
󰅙 Logged Out

# Official Bitwarden CLI
# macOS
brew install bitwarden-cli

# Linux (npm)
npm install -g @bitwarden/cli

# Unofficial Rust client (faster)
cargo install rbw

# Login (official CLI)
bw login

# Unlock vault
bw unlock

# Add to your tmux configuration
set -g @powerkit_plugins "bitwarden"

# Set keybindings
set -g @powerkit_plugin_bitwarden_keybinding_password "C-v"
set -g @powerkit_plugin_bitwarden_keybinding_totp "C-t"
set -g @powerkit_plugin_bitwarden_keybinding_unlock "C-w"

# Reload tmux configuration
tmux source-file ~/.tmux.conf

set -g @powerkit_plugins "bitwarden"

# Cache (higher TTL because bw status is slow ~1.5s)
set -g @powerkit_plugin_bitwarden_cache_ttl "60"

# Icons
set -g @powerkit_plugin_bitwarden_icon "󰌋"
set -g @powerkit_plugin_bitwarden_icon_locked "󰌾"
set -g @powerkit_plugin_bitwarden_icon_unlocked "󰿆"
set -g @powerkit_plugin_bitwarden_icon_unauthenticated "󰅙"

# Keybindings
set -g @powerkit_plugin_bitwarden_keybinding_password "C-v"
set -g @powerkit_plugin_bitwarden_keybinding_totp "C-t"
set -g @powerkit_plugin_bitwarden_keybinding_unlock "C-w"
set -g @powerkit_plugin_bitwarden_keybinding_lock ""

# Popup dimensions
set -g @powerkit_plugin_bitwarden_popup_width "60%"
set -g @powerkit_plugin_bitwarden_popup_height "80%"
set -g @powerkit_plugin_bitwarden_popup_unlock_width "40%"
set -g @powerkit_plugin_bitwarden_popup_unlock_height "30%"

Note: With show_only_when_unlocked enabled, the plugin is only visible when the vault is unlocked. This is useful for a cleaner status bar when you don't need to see the "Locked" status.

set -g @powerkit_plugins "bitwarden"
set -g @powerkit_plugin_bitwarden_keybinding_password "C-v"

set -g @powerkit_plugins "bitwarden"
set -g @powerkit_plugin_bitwarden_keybinding_password "C-v"
set -g @powerkit_plugin_bitwarden_keybinding_totp "C-t"
set -g @powerkit_plugin_bitwarden_keybinding_unlock "C-w"
set -g @powerkit_plugin_bitwarden_keybinding_lock "C-l"

set -g @powerkit_plugins "bitwarden"
set -g @powerkit_plugin_bitwarden_popup_width "80%"
set -g @powerkit_plugin_bitwarden_popup_height "90%"

set -g @powerkit_plugins "bitwarden"
set -g @powerkit_plugin_bitwarden_cache_ttl "30"

Hide the plugin when the vault is locked (only show when unlocked):

set -g @powerkit_plugins "bitwarden"
set -g @powerkit_plugin_bitwarden_show_only_when_unlocked "true"

1. Install Bitwarden CLI
2. Login: bw login
3. Unlock: bw unlock
4. Export session token to tmux:

   tmux setenv -g BW_SESSION "your-session-token"

1. Press prefix + C-v
2. Search for item (fuzzy search with fzf)
3. Select item
4. Password is copied to clipboard
5. Notification shown in tmux

1. Press prefix + C-t
2. Search for item with TOTP enabled
3. Select item
4. TOTP code is copied to clipboard
5. Notification shown with code and countdown

1. Press prefix + C-w
2. Enter master password
3. Vault unlocks and session token stored
4. Plugin status updates to "Unlocked"

The plugin supports both official and unofficial Bitwarden clients:

The plugin automatically detects which client is available and prefers bw if both are installed.

The plugin reads BW_SESSION from tmux environment:

# After unlocking, store session in tmux
bw unlock
# Copy the session token shown
tmux setenv -g BW_SESSION "your-session-token"

# Verify session is stored
tmux showenv -g BW_SESSION

For rbw, session management is handled automatically by the client.

1. Verify login status:

   bw status

2. Check if BW_SESSION is set:

   tmux showenv -g BW_SESSION

3. Unlock vault and set session:

   BW_SESSION=$(bw unlock --raw)
   tmux setenv -g BW_SESSION "$BW_SESSION"

1. Verify fzf is installed:

   which fzf

2. Check if vault is unlocked:

   bw list items

3. Test helper script manually:

   bash ~/.config/tmux/plugins/tmux-powerkit/src/helpers/bitwarden_password_selector.sh select

1. Verify items have TOTP configured in Bitwarden

2. Check if jq is installed (optional but recommended):

   which jq

3. Test TOTP helper:

   bash ~/.config/tmux/plugins/tmux-powerkit/src/helpers/bitwarden_totp_selector.sh select

The official bw CLI is slow (~1.5s per call). To improve performance:

1. Use rbw instead:

   cargo install rbw
   rbw register
   rbw login

2. Increase cache TTL:

   set -g @powerkit_plugin_bitwarden_cache_ttl "120"

Check for conflicts with other plugins:

prefix + C-y  # View all keybindings

If conflicts exist, change the keybinding:

set -g @powerkit_plugin_bitwarden_keybinding_password "C-b"

• Session tokens are stored in tmux environment variables
• Passwords are copied to clipboard and cleared after use
• The plugin never logs passwords or TOTP codes
• Cache stores only vault status (locked/unlocked), not credentials
• Helper scripts use temporary files that are cleaned up automatically

The plugin uses three helper scripts:

1. bitwarden_password_selector.sh

   • Search and copy passwords
   • Handles vault unlocking
   • Actions: select, unlock, lock

2. bitwarden_totp_selector.sh

   • Search and copy TOTP codes
   • Shows countdown timer
   • Actions: select

3. bitwarden_common.sh

   • Shared utilities
   • Session management
   • Item parsing

• PluginSmartkey - Display custom environment variables
• PluginGit - Git repository status