Skip to content
Documentation
Desktop app

Desktop app

Run paw without arguments to start the desktop app.

paw

Unlock and switch vaults

When you open Paw, select a vault and type your master password to unlock it.

If you have multiple vaults, you can switch between them at any time from the vault selector screen.

Main navigation

The bottom navigation bar has three main sections:

  • Vault: View, search, and manage your stored items.
  • Codes: View and copy two-factor verification codes (TOTP).
  • Settings: Configure application preferences.

Vault view

The Vault screen is where you work with your stored secrets.

Search and categories

You can quickly find items using the search bar at the top, or filter by category:

  • All items
  • Logins
  • Passwords
  • Secure notes
  • SSH keys

Item types

Paw supports four item types:

Item typeFields and contents
LoginUsername, password, website URL, authenticator key (TOTP), notes, attachments
PasswordStandalone password, notes
Secure noteMultiline text notes, attachments
SSH keyPublic and private key pair, optional passphrase, comment

Add and edit items

  1. Select the + (Add) button in the top bar.
  2. Choose the item type to create.
  3. Fill in the fields.
  4. Select Save.

When editing a password field, you can enter a password manually or open the built-in password generator.

Password generator

Paw includes a generator that supports three modes:

  • Random password: Configurable length with lowercase, uppercase, numbers, and symbols.
  • Passphrase: Multiple English words separated by hyphens.
  • PIN: Numeric code.

View details and quick actions

Select any item in the list to open its details view:

  • Copy: Copy usernames, passwords, verification codes, URLs, or SSH keys to your clipboard.
  • Reveal: Temporarily view hidden passwords and private keys.
  • Open URL: Open website links directly in your default browser.
  • History: View previous revisions (up to 10 saved versions) and restore any earlier revision.
  • Attachments: On Login and Secure note items, add files, download them to disk, or remove them.
  • SSH key actions: Generate a new Ed25519 key, import an existing key (OpenSSH or PEM format), or export public (.pub) and private (.key) files. Unlocked keys are automatically loaded into Paw’s built-in SSH agent.

Codes view (TOTP)

The Codes tab collects all two-factor authentication (TOTP) codes from your unlocked vault in one place.

  • Each entry displays the service name, username, and the current 6-digit or 8-digit verification code.
  • A progress bar shows the remaining seconds before the code refreshes.
  • Select the copy button next to a code to copy it directly to your clipboard.

Vault menu and settings

Open the vault menu at the top of the screen to access vault-wide tools:

  • Password audit: Test your passwords for weakness, reuse across accounts, and known data breaches using Have I Been Pwned.
  • Export credentials: Save a backup archive as an encrypted .paw file, an encrypted .cxf.age file, or a plaintext .cxf file.
  • Vault settings:
    • Edit vault: Change the vault name, icon, and display color.
    • Change master password: Re-encrypt the vault identity with a new master password.
    • Delete vault: Permanently remove the vault and its data from the device.
  • Lock vault: Lock the current vault immediately.

Application settings

Select the Settings tab in the bottom bar to adjust global preferences:

  • Auto-lock: Set how quickly Paw locks open vaults when the app is in the background (options: Never, 1 minute, 5 minutes, 15 minutes, 30 minutes, 1 hour).
  • Startup vault: Choose whether Paw automatically opens the Last used vault or lets you Choose at startup.
  • Appearance: Select your preferred interface theme (System, Light, or Dark).
  • About: View the installed version and license information.