Tools

Goodboy bridges your password managers — securely routing logins, OTPs, and passkeys across Chrome, Apple Passwords, KeePassXC, and more, with no manual exports.

01. The Matrix What Connects to What

Connector	Transport	Logins*	OTP	Passkeys	Notes	Folders	Custom
iCloud / Apple	CXP handoff	R/W	R/W	R/W	—	—	—
KeePassXC	`keepassxc-cli`	R/W	R/W	R/W	R/W	W	—
Chrome + Chromium (read)	Local SQLite	R/W	—	—	—	—	—
1Password Bitwarden ProtonPass	Official CLIs	R	R	—	R	—	R
Bitwarden JSON	File export	W	W	W	W	W	—

R/W Read & Write

R Read only

W Write only

— Not supported

* Logins carry URL, username, and password.

The preflight computes this matrix for the exact flow you're about to run.

02. Setup Connect a Device

The motion for each connector — from zero to a working device in Goodboy's sidebar. Browsers and Apple Passwords need no install; the rest take a one-time setup, stored in the macOS Keychain under a signed-binary ACL. Select a connector for full setup instructions.

Native ecosystems OS handoff

iCloud / Apple Passwords

Fields: passwords, OTP, passkeys

Install

Nothing hits disk.
SecuredBox is RAM-only.

// Credentials in motion, never at rest. One file-destination exception — Bitwarden JSON, by choice.

03. Special Paths Two Routes Worth Naming

Most flows are a straight source → destination. These two earn their own section — one is the competitive claim, the other is the only time Goodboy ever writes to your disk.

The claim

Passkeys → KeePassXC

Apple's Credential Exchange (CXP) lets you push passkeys out of iCloud, but KeePassXC can't build CXP import from Qt/C++ — it's an open issue on their tracker (#11363). Goodboy fills the gap from the outside.

Export from Apple's Passwords app → Goodboy; push SecuredBox to your KeePassXC database. Passkeys land directly in your .kdbx — no intermediate file, no lossy conversion.

The exception

Bitwarden JSON

In the Bitwarden JSON device settings, pick a folder. When you push SecuredBox to this device, Goodboy writes a Bitwarden-format export carrying passwords, OTP seeds, passkeys, notes, and folders — the widest-capture format Goodboy offers.

This is the only scenario where Goodboy writes credential data to your local disk, and only when you explicitly choose it as your destination.