KeyRotate

KeyRotate is a developer tool for keeping API keys and AI service credentials safe, and replacing them when they need to be replaced. It was created after its developer had AI API keys hijacked and was billed about US$10,000 in 24 hours despite a spending cap.

Every key is stored in the macOS Keychain behind Touch ID. Keys never sit in plain files, are not uploaded to any cloud service, and no sign-up is needed. You can rotate keys on demand or on a schedule.

Where a vendor allows it, KeyRotate handles the whole rotation: it requests a new key, checks that it works before saving it, saves it, verifies it again, and restores the old key if anything fails. Old keys are left active rather than revoked automatically, so a scheduled job or an overlooked server keeps working; the app prompts you to retire the old key only after every place that uses it has switched over. It is free to download.