Passwords
8–128 characters, per-set minimums, ambiguous-character exclusion, and eight presets for the services that impose their own rules.
macOS 14+ · Apple silicon & Intel
Passwords that never touch a network.
KeyStrong generates passwords, passphrases, keys and tokens using your Mac's own cryptographic random source. No account, no sync, no server. There is nothing to send.
Password Passphrase Analyse Utilities
7hQ&vR2mK9pXz$Lw4
Entropy 104.2 bits
Offline crack time 2.4 × 10¹⁴ yr
Length 17
Never leaves your Mac
The app ships without the network entitlement.
KeyStrong runs in the macOS App Sandbox with no outgoing or incoming network permission. It cannot phone home even if it wanted to; the capability isn't in the binary. Generation happens in memory; nothing is written to disk unless you save it yourself.
Read the security architecture → 0 Network requests No sandbox network entitlement, inbound or outbound.
0 Accounts No sign-up, no email, no licence server.
0 Analytics SDKs No telemetry, crash reporters or third-party code.
What it does
Six tools, one window
Passphrases
Diceware over the EFF 7,776-word list. Three to twelve words, your separator, optional capitals and an appended digit or symbol.
Analysis
Paste anything you already use. KeyStrong reports true entropy and flags dictionary words, keyboard runs, repeats and dates. All of it locally.
Developer utilities
UUID v4 and v7, hex blobs, API tokens with prefixes, TOTP secrets, recovery-code sets and SSH key material.
Menu bar quick-gen
A keyboard shortcut generates and copies without opening the window. The clipboard clears itself on your timer.
Session history
The last generations stay available while the app is open, held in memory only, and vanish on quit. Nothing is persisted.
The window
One window, six tabs, no chrome you don't need
correct·horse·battery·staple
Summer2019!
28.4 bits Weak · cracked in minutes
✕ Dictionary word: "summer" ✕ Year pattern: 2019 ✓ No keyboard runs
UUID v7 0190f2a1-7c3e-7b21-9f44
API token sk_live_8Fq2mX9pLw4vR7
TOTP secret JBSWY3DPEHPK3PXP
Recovery 4F2K-9WQ7-LM3X
The arithmetic
Length beats cleverness
Offline attack at 100 billion guesses per second, roughly a well-funded GPU cluster working on a leaked hash. Substituting 3 for e buys you about one bit.
| Credential | Length | Entropy | Time to crack |
|---|---|---|---|
| Summer2019! | 11 | 28 bits | instant |
| Random alphanumeric | 8 | 48 bits | 47 minutes |
| Four-word passphrase | 4 words | 52 bits | 18 months |
| Six-word passphrase | 6 words | 78 bits | 96 million yr |
| KeyStrong default | 17 | 104 bits | 2.4 × 10¹⁴ yr |
Buy it once
One purchase on the Mac App Store, with Family Sharing. No subscription, and no features held back for a Pro tier.