What's new in Carriel

• The window runs on Electron 44.9.3, with Chromium's latest security fixes. It no longer trusts certificates issued through the compromised eMudhra intermediates (GHSA-jr5w-w6x2-84p9).

• A new license entered after a refund takes this Mac's place at once. Before, the Mac stayed on "Setting up the bigger pouch on this Mac…" until it looked again.

• A refund shows on your Macs right away. Settings › About has Check Now while a Mac uses the license, and Macs… notices when this Mac's place is gone. Before, it waited for the Mac's next check, a few days later.
• Opening Carriel after you quit it starts its menu bar part too, also when Carriel opens at login. Before, you pressed Start It on every open until you logged in again.
• While a Mac sets up the bigger pouch, Settings › About shows a small spinner again, not a long spinning bar.

• Your pouch syncs from a Mac's first start. In 1.0.1, which never reached carriel.app, sync stopped every round and said iCloud wasn't available.
• Show, Edit, the pouch password, the recovery key and Carriel's notices open at their full size. In 1.0.1 they opened as a small glass dot.
• Remove Carriel… also stops a Carriel that opened at login, when it can't be asked to quit.
• A file copied in Finder and pasted into the card goes in as the file, not as its name.
• The card stays open while you drag a file onto it from Finder or another app.

• Carriel's menu bar part no longer stops right after its first start on a Mac. 1.0.0 did, before it was ever offered on carriel.app.

Carriel 1.0 is a new Carriel: a small Mac app, a pouch in your menu bar for the private things you keep around, such as API keys, passwords, recovery codes, notes and small files. Tuck a thing in with ⌃⌥⌘V and take it out with Touch ID. It lives in your own iCloud, the same on every Mac you own. It's a free download from carriel.app, notarized by Apple, and it keeps itself up to date. macOS 26 or later on Apple silicon, in English and Korean.

From carriel.app

• Carriel is signed by LonelyDuck Software (team RD9TC9MV83) and notarized by Apple.
• It keeps itself up to date. About once a day it asks dl.carriel.dev whether there's a newer version, with the version you run and nothing unique to your Mac, and checks LonelyDuck's signature, the download's SHA-256, its Developer ID and Apple's notarization before it installs one, never an older one. By default it installs while your Mac is locked and you aren't using Carriel; Settings › About › Updates can Ask First or turn checks Off. Check for Updates… is in the Carriel menu, and Restart to Update appears when one is ready.
• After an update, the pouch in the menu bar says "Carriel is now" the new version once, with What's New.
• Settings has an About pane: Carriel's version and its updates (Automatic, Ask First or Off, with Check Now), room in your pouch, the bigger pouch's license and the Macs that use it, and Remove Carriel….
• Remove Carriel… gives this Mac's place on your license back, has Carriel delete its own files and keys on this Mac, stops it opening at login and moves the app to the Trash. Your pouch, its key and your license stay in iCloud with your other Macs; a pouch that's only on this Mac goes with it, and Carriel says so first.
• History says when this Mac started using your license, when the license was removed, and when LonelyDuck refunded or turned it off, never the license itself.
• In Keychain Access, your license is "Carriel license", apart from your pouch's key.
• What leaves this Mac says exactly what a license check sends LonelyDuck: the first time, the license, an id made for the Mac and the license, its model (never its name), a public key and a signature; after that, only the id and a signature.
• Opened from the disk image or Downloads, Carriel first offers to move itself to your Applications folder.

Putting things in

• Press ⌃⌥⌘V in any app, then paste, drop a file or type. Carriel names what it recognises ("OpenAI project key · 51 characters") and files it in one of eight categories: AI, Dev tools, Cloud & data, Payments, Accounts, Home, Documents and Other. Change either before you press Return.
• The card never shows the value, only its kind and length. Hold ⌥ to peek.
• An .env block becomes separate things, with its secrets ticked and settings such as PORT left unticked, or stays one note.
• Recovery codes count what's left, a Wi-Fi password keeps its network, and an App Store Connect key keeps its Key ID from the file name.
• Drop a file on the pouch in the menu bar to tuck it in. Files up to 10 MB.
• Tucking in never asks for Touch ID. After a paste, Carriel clears the clipboard and tells you where the original still is.
• When Carriel doesn't know something, the card says so and leaves the name to you, rather than guessing. If its naming rules ever fail to load, the card leaves every name to you, and the pouch in the menu bar says how to get them back.
• An Apple Account recovery key waits for a pouch password: add one first, or keep that key on paper. While one is in your pouch, the password stays on.
• A pasted password with = in it stays one password: Carriel never turns half of it into the name.
• After another of your Macs changes your pouch's key (a pouch password turned on or changed, a Mac removed), the card asks for Touch ID once, then tucks the thing in. If that doesn't work, nothing goes in, and what you pasted stays on your clipboard.

Take it out

• Click the pouch in the menu bar, type a few letters, press Return and touch the sensor: it's on your clipboard. ⌘1 to ⌘8 open a category, and pins come first.
• Copy as NAME=…, Copy Account, Copy Next Code, Show (in its own panel, which hides after 10 seconds), Save a Copy… and Quick Look.
• A copy stays on this Mac (not Universal Clipboard), is marked so clipboard history apps that honour the marker leave it out, and clears after 30 seconds, or as soon as Carriel locks.
• Two ways to lock, in Settings › Security. With your Mac, the default: one Touch ID covers the next 30 seconds, and sleep, screen lock, switching users and closing the panel end it. Every time: each take-out asks. Deleting for good always asks again.
• Locked isn't empty: names stay on screen, tucking in still works, and the first thing you take out asks for Touch ID.
• Show's panel and Quick Look close at once on Lock Now, sleep, screen lock or switching users. Show's panel is hidden from screenshots where macOS allows; screen recording and screen sharing may still show it.
• An amber dot on the pouch in the menu bar means something needs you: a thing past its date, a sync that stopped, or ⌃⌥⌘V held back by another app's Secure Keyboard Entry. It shows while Carriel is locked too.
• If your pouch can't open on this Mac yet (the Mac isn't unlocked, or the Keychain refuses Carriel), the pouch in the menu bar says why and what to do, and Carriel keeps trying by itself.
• The pouch in the menu bar starts with your Mac only if you say so: when you finish setting up, or when your pouch first opens on another of your Macs (Open Carriel when this Mac starts), or later in Settings › General. Otherwise opening Carriel starts it.

The window

• Open Carriel for the whole pouch: search, pins, the eight categories with their counts, and each thing's details (account, site, memo, an expiry date, where it came from).
• Recently Deleted keeps things for 30 days on every Mac, with Put Back. History says what happened, and on which Mac.
• Tidy Up moves everything you ticked to Recently Deleted in one step, and one Undo puts all of it back.
• History says when Carriel refused a pouch key from a Mac outside your pouch, and what to do about it.
• The window never holds a value. It asks the pouch in the menu bar, which asks for Touch ID, and it doesn't take drops or pasted files: Add a File… and ⌃⌥⌘V do.
• A value you replaced in the last 30 days can come back: Restore Previous Value in its details asks for Touch ID, and Undo puts the newer value back.
• The window opens where you left it, at the size you left it, as long as that place is still on one of your screens.
• Help opens carriel.app in the window's language.
• When something needs you, such as a mass delete from another Mac, a full iCloud or a recovery key gone with a removed Mac, the window, the menu bar's pouch and the card say it the same quiet way: a small stitched seal with its icon, a soft wash of amber, and the way out.

Your iCloud, your keys

• Everything is encrypted on your Mac before it reaches iCloud, names included, and every Mac on your Apple Account opens the same pouch through iCloud Keychain.
• A pouch password, if you want one: then getting into your iCloud Keychain alone can't open your pouch, including what you tucked in before you turned it on. A new Mac asks for it once. Carriel suggests six random words, or you can use your own: a meter says how strong it is, and one that's easy to guess isn't accepted. Turn it off again with Turn Off… in Settings › Security.
• A recovery key, if you want one: 24 words on paper open your pouch on a new Mac when no other Mac is at hand. With a pouch password on, making one asks for it. If that Mac's iCloud Keychain already holds a different pouch key, Carriel asks before your recovery key replaces it.
• Remove a lost or sold Mac in Settings › iCloud and Macs. Carriel makes a new pouch key, and the removed Mac doesn't get it; it can't join your pouch again in this version of Carriel. A recovery key made on that Mac stops working, and Settings offers to make a new one right there.
• Deleting for good, the pouch password, the recovery key, removing a Mac and weaker settings always ask for Touch ID, and the window's Touch ID is its own: one given to the menu bar's pouch never lets the window take a thing out.
• Settings lists what leaves this Mac: iCloud; update checks to dl.carriel.dev; with the bigger pouch, each Mac's license checks with LonelyDuck; and links you open. Carriel sends no usage data, no analytics and no crash reports.
• When another of your Macs deletes many things for good at once, Carriel keeps them on this Mac and pauses iCloud until you choose. The window and the pouch in the menu bar say what waits and which Mac deleted it, with Keep Them and Delete Them (Touch ID).
• If this Mac's iCloud is signed in to a different Apple Account, Carriel stops syncing rather than put your pouch there, and says so until you sign back in.
• When your iCloud is full, Carriel says so and where to make room; changes wait on this Mac and go up when there's space.
• If Carriel's data is deleted from iCloud, your Macs put it back while they run, without a restart.

25 things free, a bigger pouch once

• Your pouch holds 25 things for free, with every feature. The bigger pouch holds up to 100, for $2.99 once (₩4,000), for life, bought by card from LonelyDuck: Get the Bigger Pouch in Settings › About, or on the card when your pouch is full, after Tidy Up.
• Your license comes by email. Copy it and press ⌃⌥⌘V, or paste it into Enter License… in Settings › About. Your other Macs pick it up through iCloud Keychain, up to 10 at once; Macs… lists them, and Release gives a Mac's place back. Lost the email? Find My License, at LonelyDuck.
• Each Mac checks its license with LonelyDuck about twice a week. A Mac that can't for 30 days, or after a refund, keeps every thing and every feature, and only stops taking new things past 25.
• A full refund within 30 days, for any reason, from LonelyDuck.
• The list's footer counts your things only near the end: "21 of 25 things" from 20, and Make Room… once the pouch is full.

From Carriel 0.2

• Carriel 1.0 is a different app under the same name, and installing it replaces the Carriel in your Applications folder. It doesn't keep .env files, SSH keys or signing identities in step between Macs, and it has no carriel command. What Carriel 0.2 put in your iCloud stays as it was.