diff --git a/run_once_before_install_passwordmanager.sh.tmpl b/run_once_before_install_passwordmanager.sh.tmpl
new file mode 100644
index 0000000..be573ac
--- /dev/null
+++ b/run_once_before_install_passwordmanager.sh.tmpl
@@ -0,0 +1,9 @@
+{{ if eq .chezmoi.os "darwin" -}}
+#!/bin/bash
+
+brew install bw
+{{ end -}}
+
+bw config server https://vault.beisel.org
+
+echo You can now login with `bw login`