A person reads every message

Frequently asked

Is KeyStrong a password manager?

No. It generates credentials and measures their strength. Storing and filling them is your manager's job - the Keychain, 1Password, Bitwarden, whatever you already use.

Where does my generated password go?

Into memory, and onto your clipboard if you copy it. Nowhere else. Session history is in memory only and disappears when you quit. If you close the app without saving a value, it is gone permanently - we cannot recover it.

Does it work offline?

It only works offline. The app has no network entitlement at all, so behaviour on a plane is identical to behaviour at your desk.

Why does my password report fewer bits after I exclude characters?

Because it is genuinely weaker. Excluding ambiguous characters like l1IO0 shrinks the alphabet, and entropy scales with the log of alphabet size. Add a character or two of length to get the bits back.

A site rejects the passwords KeyStrong makes.

Some services silently cap length or ban symbols. Use a preset, or set the maximum length the site accepts and turn symbols off. If you hit a service that needs a preset we don't ship, tell us and we'll add it.

Is the passphrase word list public? Doesn't that weaken it?

It is the public EFF long list, and no. Assume the attacker knows the list; the strength is the number of words you draw from it. Six words from a known 7,776-word list is 78 bits, with that assumption already priced in.

Can I use it on my other Macs, or share with family?

Yes. One purchase covers every Mac on your Apple Account, and Family Sharing is enabled.

How do I get a refund?

Refunds are handled by Apple, not by us - use Report a Problem in your App Store purchase history. Mail us anyway if something didn't work; we'd rather fix it.