Press release ·
KeyRotate for iPhone and Apple Watch is now on the App Store
The new companion app brings the alarms and breach advisories from KeyRotate on the Mac to the iPhone and Apple Watch, and lets people ask their Mac to rotate a key after Face ID. The phone never holds a key's value.
Enfour, Inc. today released KeyRotate for iPhone and Apple Watch on the App Store. KeyRotate on the Mac keeps API keys in the macOS Keychain, replaces them through the vendor's API and updates the files that use them, and watches for signs that a key has leaked. A leaked or refused key is urgent, and the developer is often away from the Mac. The new app shows what the Mac found, wherever its owner is, and lets them ask the Mac to act.
What it does
- Alarms from every paired Mac, worst first: a key found in an AI coding tool's logs, a key committed to a repository or served by a website, a leaked email password, a key a vendor suddenly refuses, an account that may have been disabled. Each says what happened and when.
- The breaches that concern you. Enfour's signed breach advisories, the ones published as Leak news, ranked by the Mac as exposed, likely or possible from the keys and accounts it knows the user holds. The ranking is worked out on the Mac, and nothing about which services someone uses is sent anywhere.
- Rotate from anywhere. Keys are listed by name and state. After Face ID, the Mac makes the replacement key, checks that it works and updates every file and server that uses it, exactly as if Rotate had been pressed at the desk. A notification reports the result and how many files were updated.
- Apple Watch shows the latest alarms, and asks for a confirmation on the wrist before any rotation is requested.
Keys stay on the Mac
The iPhone sees only key names, states and alarms; it never holds a key's value. Everything between the phone and the Mac is end-to-end encrypted with keys only the two devices hold, and signed by the device that sent it. Enfour's relay passes the ciphertext along and cannot read it. A request expires after 15 minutes, cannot be replayed, and is acted on only if the Mac can verify it. There is no account to create, and no telemetry.
Pairing
On the Mac, open Guard and choose Pair iPhone… to show a QR code. Scan it with the app, confirm on the Mac, and the two are paired. A device can be removed from either side at any time.
Availability
KeyRotate for iPhone and Apple Watch is a free download from the App Store, in English, Japanese and Korean. It needs iOS 17 or later (watchOS 10 or later for the watch app) and KeyRotate on a Mac running macOS 14 or later. The iPhone and Watch apps make no purchases: rotation runs on the Mac, under its KeyRotate subscription. The companion pairs with the Mac edition only, not with KeyRotate for Windows.
About Enfour
Enfour, Inc. was founded in 1992 at Apple's request and has run public services on Apple hardware ever since. It makes FrontierStack, a Mac app for running servers, devices and services, and KeyRotate, which keeps developers' API keys encrypted on Mac and Windows and replaces them everywhere they are used. Our story
Media contact
Enfour, Inc. · support at frontierstack dot app
More from Frontier News
· FrontierStack, KeyRotate
Enfour publishes its signed breach advisories on the FrontierStack website
Leak news, the advisories FrontierStack and KeyRotate receive when a service or server software their users rely on is breached, is now on frontierstack.app in English, Japanese and Korean.