Terms of Service — Keythentic

These Terms of Service ("Terms") govern your use of the Keythentic Android application and this website, keythentic.com (together, the "Service"). By downloading, installing, or using Keythentic, you agree to these Terms. If you don't agree, please don't use the Service.

1. What Keythentic is

Keythentic is an Android application that lets you store two-factor authentication (TOTP/HOTP) codes, passwords, credit card details, secure notes, and passkeys in a vault encrypted on your own device with a master password you choose. Keythentic optionally lets you back up your encrypted vault to your own Google Drive account, or export it locally as an encrypted file.

2. Your account and your master password

Keythentic does not require creating an account with us — there is no username/password login to a server we operate. Your vault is protected by a master password that only you set and only you know. You are solely responsible for remembering it and keeping it confidential.

Important: because your vault is encrypted end-to-end with a key derived from your master password, we have no way to recover your vault or reset your master password if you lose it. Losing your master password (and any backup/recovery mechanism the app provides you) means losing access to your vault contents. This is a deliberate consequence of the privacy-preserving design described on our Security page, not a limitation we can override on request.

3. Acceptable use

You agree not to:

Use the Service for any unlawful purpose, or to store or transmit content you don't have the right to store;
Attempt to reverse-engineer, decompile, or interfere with the Service in a way intended to bypass its security model or access other users' data;
Use the Service to attack, disrupt, or gain unauthorized access to any system, including our own infrastructure or that of third parties (such as Google Drive) the Service integrates with.

4. Third-party services

If you enable Google Drive backup, that feature relies on Google's Drive API and is subject to Google's own terms and privacy practices for your Google account. Keythentic only requests the minimum access needed to read and write its own backup file in your Drive's app-specific storage area; we don't control, and aren't responsible for, Google's own systems or policies.

5. No warranty

The Service is provided "as is" and "as available," without warranties of any kind, express or implied, including but not limited to implied warranties of merchantability, fitness for a particular purpose, and non-infringement. We do not warrant that the Service will be uninterrupted, error-free, or completely secure — no software can make that guarantee, and we encourage you to keep an independent backup of anything you cannot afford to lose.

6. Limitation of liability

To the fullest extent permitted by applicable law, Keythentic and its developer will not be liable for any indirect, incidental, special, consequential, or punitive damages, or any loss of data, arising from or related to your use of, or inability to use, the Service — including data loss resulting from a forgotten master password, as described in Section 2.

7. Changes to the Service or these Terms

We may update these Terms from time to time as the Service evolves. If we make material changes, we'll update the "Last updated" date at the top of this page. Continued use of the Service after changes take effect constitutes acceptance of the revised Terms.

8. Termination

You may stop using the Service at any time by uninstalling the app. Because there is no server-side account, there is nothing further for us to terminate on our end — see our Data & Account Deletion page for what uninstalling does and doesn't remove.

9. Contact

Questions about these Terms? Get in touch through our contact form.