Keep your passwords.
Lose the busywork.
Latch is a Mac app that gives an AI agent permissioned access to your browser and logged-in accounts. It keeps your passwords encrypted on your Mac and fills them straight into approved sites, so your AI never sees them.
A gatekeeper to review
every request.
The Plow Gatekeeper, a HIPAA-compliant AI reviewer, checks your agent’s requests and blocks anything malicious or out of scope, so your data stays protected while the useful work gets done.
A password vault your AI can use. Not read.
Your passwords stay private. Your vault stays encrypted on your Mac. Latch fills saved passwords directly into approved sites without handing them to your AI. Plow keeps no cloud copy of your vault.
You set the permissions. Review requests yourself or let Gatekeeper check them against the task you've approved. Manage saved permissions in Latch and revoke them when you need to.
You can see what happened. Latch keeps a record of each request, Gatekeeper's decision, and the result. See what ran, what was blocked, and what needs your attention.
Trust starts with
seeing how it works.
Read how Latch stores your passwords, how Gatekeeper reviews requests, and how it runs actions on your Mac. The code and security documentation are open for you to inspect, including the protections and their limits.
Bring your own agent.
Run it safely.
Latch works with Claude, Codex, Hermes, OpenClaw, and other MCP-compatible agents. Whichever one you already use can request actions on your Mac through Latch, with Gatekeeper reviewing each one.
ClaudeAnthropic
CodexOpenAI
OpenClaw
Hermes
Plow can host the agent, connect it to chat and cloud services, and route its approved Mac requests through Latch. Build on Plow
FAQs
Where does Latch run? Latch runs on your Mac. The agent may run remotely: your Mac opens the connection to the Plow relay, which forwards authenticated agent requests to Latch. The browser Latch drives is the one on your Mac.
Can my AI see my saved passwords? Latch fills saved passwords directly into approved sites without returning them to your AI. Filled secrets are masked in the browser views Latch provides to the agent.
What is the Gatekeeper? Gatekeeper is an independent, HIPAA-compliant AI reviewer. When you turn it on, requests that fall outside the task you approved go to Gatekeeper, which allows the in-scope ones and denies the rest. You set the boundary and can review its decisions and revise your instructions for future requests.
What can my AI do with Latch? It can use a browser, read and write files, and run commands on your Mac. Latch routes those requests through the approval controls you choose.
Do I have to approve every request? You can review requests yourself, save permissions for matching requests, or let Gatekeeper evaluate requests against your instructions.
What stays on my Mac? Your encrypted vault stays on your Mac. Plow keeps no cloud copy of it. Requests and results travel between your agent and your Mac. When Gatekeeper is used, request details and your instructions are sent for review. It sees those, never your vault.
Can I change my permissions later? Yes. You can review and revoke saved permissions in Latch.
Does Latch work on Windows or Linux? Latch is currently available for Mac only. A ports it to Windows and Linux.