Universal .dmg works on Apple Silicon (M1, M2, M3, M4) and older Intel Macs. Same code, signed by 8bit Solutions LLC (Bitwarden's legal entity), notarised by Apple.
Single download, native performance on both architectures. macOS 11 (Big Sur) or later.
~/Downloads/.Bitwarden also ships through the Mac App Store. Same code, but distributed via Apple's channel:
Open Mac App Store →App Store advantages: auto-updates through System Settings → App Store; sandboxed by default; Family Sharing eligible.
App Store caveats: sandbox restrictions affect the Safari extension setup flow on first launch (one extra permission grant required); slower to ship than the .dmg release (App Store review queue adds ~1 week).
The .dmg is a Universal binary — one file, both architectures. On launch, macOS picks the correct slice automatically. Activity Monitor → Kind column shows whether the running process is Apple Silicon or Intel.
If you specifically want the Intel build (e.g., debugging a compatibility issue on a 2019 MacBook Pro), use the arch command:
arch -x86_64 /Applications/Bitwarden.app/Contents/MacOS/Bitwarden
This runs the Intel slice through Rosetta 2 even on M-series Macs. There's basically no reason to do this in normal use; native is always faster.
Safari extensions are bundled inside the macOS app — installing the Bitwarden app gives you both the desktop vault viewer and the Safari extension. Enable it after install:
Safari Web Extensions are sandboxed differently from Chrome/Firefox extensions. Some power-user features (autofill into iframe-isolated forms) work better on Chrome. If you live on Safari, Bitwarden works fine; if you frequently switch between Safari and Chrome, install both extensions.
Confirm the .dmg you downloaded is signed by Bitwarden:
codesign -dv --verbose=4 /Applications/Bitwarden.app 2>&1 | grep -E "Authority|TeamIdentifier"
Expected output:
Authority=Developer ID Application: 8bit Solutions LLC (LTZ2PFU5D6)
TeamIdentifier=LTZ2PFU5D6
Anything else — different team identifier, missing Developer ID — means the file came from somewhere other than Bitwarden's signing authority.
Yes — same as the .dmg, free to download and use. The free tier is unlimited passwords across two devices; Premium ($10/year) is the same paid upgrade regardless of where you got the app.
The current desktop app requires macOS 11+. For macOS 10.15 or earlier, your options are: the web vault at vault.bitwarden.com, or the Safari/Chrome browser extension. Both work fine on older macOS.
Yes — Touch ID on supported MacBooks unlocks the vault without typing the master password. Face ID on iPhone/iPad. Configured under Settings → Account Security → Unlock options.
Yes — brew install --cask bitwarden installs the desktop app, brew install bitwarden-cli installs the CLI. Homebrew pulls from the same official artifacts; this just automates the .dmg install.
iCloud Keychain is Apple-only; Bitwarden works across every platform you use. iCloud Keychain has no separate master password (tied to your Apple ID); Bitwarden has zero-knowledge encryption with a master password Apple can't recover for you. iCloud Keychain has no business/family sharing model; Bitwarden has Organizations. Different tools for different threat models.