Flatpak Configuration

Goldwarden is available as a graphical application as a Flatpak. By default, the Flatpak spawns a goldwarden daemon within the sandbox. You can also use an unsandboxed daemon with the Flatpak. In this case, make sure the daemon has the following environment variable set:

GOLDWARDEN_SOCKET_PATH=~/.var/app/com.quexten.Goldwarden/data/goldwarden.sock

For some features, such as browser biometrics, or adding ssh keys the CLI is currently still required. For help setting these up, check out the other wiki pages.

Note for KDE/Wayland users

Due to an upstream bug, if you are seeing a blurry application, try setting: /usr/share/xdg-desktop-portal/kde-portals.conf to

[preferred]
default=kde
org.freedesktop.impl.portal.Settings=kde;gtk;

and reboot.

If that does not work, you can try forcing the use of XWayland, as described out in: https://github.com/quexten/goldwarden/issues/35#issuecomment-1872587197

Fido2 Support

If you run the daemon in the flatpak, it is sandboxed from accessing fido2 devices. There is no good technical solution to pass in fido2 devices available yet, so in the meantime, launch the flatpak with the --device=all permission.

CLI

You can use an externally installed cli by configuring the socket path to GOLDWARDEN_SOCKET_PATH=/home/$USER/.var/app/com.quexten.Goldwarden/data/goldwarden.sock Alternatively, you can use the cli included in the flatpak: flatpak run --command=goldwarden com.quexten.Goldwarden. Feel free to alias this in your shell.