KeyRotate now works on macOS, iOS, Windows, Linux and Android

Enfour’s API key manager now runs on Mac, Windows and Linux computers, and free companion apps for iPhone, Apple Watch and Android show its leak alarms and ask the computer to rotate a key from anywhere. The phone never holds a key’s value.

Enfour, Inc. today announced that KeyRotate, its API key manager, now works on macOS, iOS, Windows, Linux and Android. The full app runs on Mac, Windows and Linux computers. It keeps developers’ API keys encrypted, replaces them through the vendor’s API where the vendor allows it, updates every file that uses them, and watches for signs that a key has leaked. Free companion apps for iPhone, Apple Watch and Android carry those alarms to wherever the key’s owner is, and let them ask their computer to act. The phone never holds a key’s value.

Five platforms at a glance

A leaked or refused key is urgent, and its owner is often away from their desk. That is why the computer does the work and the phone keeps watch.

On the computer: macOS, Windows and Linux

• Rotation that updates everything. KeyRotate gets a replacement key from the vendor, checks that it works before saving it, then rewrites every .env file, config file, server and hosting or CI secret that used the old one, keeping a backup. Where a vendor has no API for new keys, KeyRotate says so and checks the key you paste before it replaces the old one.
• Guard. One alarm screen for every sign of a leak: a key found in an AI coding tool’s logs, committed to a repository or served by a website, a key a vendor suddenly refuses, and Enfour’s signed breach advisories, published as Leak news.
• Keys encrypted by the system: the Keychain on macOS, DPAPI on Windows, and the desktop keyring (GNOME Keyring or KWallet) on Linux.

On the phone and the watch: iOS and Android

• Alarms from every paired computer, worst first, each saying what happened and when.
• The breaches that concern you. Advisories ranked as exposed, likely or possible from the keys and accounts the computer knows you hold. The ranking is worked out on the computer, and nothing about which services you use is sent anywhere.
• Rotate from anywhere. After Face ID on iPhone, or fingerprint or face unlock on Android, the computer makes the replacement key, checks it and updates every file and server that uses it, exactly as if Rotate had been pressed at the desk. A notification reports the result.
• Apple Watch shows the latest alarms, and asks for a confirmation on the wrist before any rotation is requested.

The phone sees only key names, states and alarms. Everything between the phone and the computer is end-to-end encrypted with keys only the two devices hold, and signed by the device that sent it. Enfour’s relay passes the ciphertext along and cannot read it. A request expires after 15 minutes, cannot be replayed, and is acted on only if the computer can verify it. To pair, open Guard in KeyRotate, show the pairing code and scan it with the phone. There is no account to create.

Pricing

On Windows and Linux, one subscription of US$1.99 or ¥200 a month covers up to three computers; subscribe on frontierstack.app. On macOS, KeyRotate comes from the Mac App Store, and its monthly subscription starts in the app. The iOS and Android apps are free and make no purchases: rotation runs on the computer, under its KeyRotate subscription. If a subscription lapses, every key stays visible and copyable; only rotation, file updates and switching pause.

About Enfour

Enfour, Inc. was founded in 1992 at Apple’s request and has run public services on Apple hardware ever since. It makes FrontierStack, a Mac app for running servers, devices and services, and KeyRotate, which keeps developers’ API keys encrypted on Mac, Windows and Linux and replaces them everywhere they are used. Our history

Media contact

Enfour, Inc. · Contact form

This release was first published on Frontier News at frontierstack.app.