Support

Frequently asked

Is KeyStrong a password manager?

No. It generates credentials and measures their strength. Storing and filling them is your manager's job - the Keychain, 1Password, Bitwarden, whatever you already use.

Where does my generated password go?

Into memory, and onto your clipboard if you copy it. Nowhere else. Session history is in memory only and disappears when you quit. If you close the app without saving a value, it is gone permanently - we cannot recover it.

Does it work offline?

It only works offline. The app has no network entitlement at all, so behaviour on a plane is identical to behaviour at your desk.

Why does my password report fewer bits after I exclude characters?

Because it is genuinely weaker. Excluding ambiguous characters like l1IO0 shrinks the alphabet, and entropy scales with the log of alphabet size. Add a character or two of length to get the bits back.

A site rejects the passwords KeyStrong makes.

Some services silently cap length or ban symbols. Use a preset, or set the maximum length the site accepts and turn symbols off. If a service needs rules no preset covers, set them by hand and save the profile.

Is the passphrase word list public? Doesn't that weaken it?

It is the public EFF long list, and no. Assume the attacker knows the list; the strength is the number of words you draw from it. Six words from a known 7,776-word list is 78 bits, with that assumption already priced in.

Can I use it on my other Macs, or share with family?

Yes. Download it on every Mac signed into your Apple Account. There is no licence to move and nothing to activate.

If it is free, what is the catch?

There is no paid tier, no advertising and no analytics, and the app cannot reach the network to send anything anywhere. It exists because I wanted it on my own Mac.