Keyrook Get Keyrook Authenticator

Keep your keys to yourself.

Keyrook builds security and privacy tools that do their work on your own device. What they keep is encrypted before it goes anywhere, the code is open for anyone to read, and nothing in them reports back on you.

Explore our products How we build
  • Local-first
  • End-to-end encrypted
  • Open source
  • No trackers
Without your key, all a thief gets is a locked box.

How we build

Built so you do not have to take our word for it

Every Keyrook tool is built the same way, whatever its job: on your own device first, on open standards, and in the open.

  • Local-first

    What a tool keeps is encrypted on your own device before it goes anywhere, under a key only you hold. Nothing readable is written to disk.

  • End-to-end encrypted sync

    Our servers store only what they cannot read, and your devices refuse anything a server has altered.

  • Open standards, proven cryptography

    Published algorithms, run by the browser's own Web Crypto and checked against their published test vectors. No cipher of our own.

  • Least privilege

    Each tool asks only for the access its job needs. Keyrook Authenticator cannot read the websites you visit.

  • Open source

    The code is published under GPL-3.0. Read it, build it yourself, and compare your build with the one the store ships.

  • Nothing reports back

    No analytics, no ads, no trackers: not in the tools, and not on this site, which loads nothing from anywhere else.

Built on

  • AES-256-GCM
  • PBKDF2-SHA256
  • TOTP · RFC 6238
  • HOTP · RFC 4226
  • Web Crypto API
  • GPL-3.0

Read the security model

Products

What we make

Each Keyrook tool does one job, wears its own mark drawn in the same hand, and keeps the same rules.

Keyrook Authenticator

Two-factor codes in your browser

The six-digit codes that GitHub, Google, your bank and everything else ask for, one click away. Encrypted on your computer, unable to read the websites you visit, and kept in step across your browsers only if you ask.

  • Chrome and Edge
  • Free, no ads
  • Open source
Learn more

Get it from the Chrome Web Store or Edge Add-ons

Sample accounts, drawn rather than photographed.

The rule behind every Keyrook tool

A tool that holds the keys to your accounts should know as little about you as it can, and show its work.

Keyrook account

One account for every Keyrook tool

Sign in once, and what your Keyrook tools keep stays in step across your browsers and computers, without the server ever being able to read it.

  • Optional

    Every tool works without one. Without an account, nothing leaves your device.

  • The same sign-in, tool after tool

    Today it keeps Keyrook Authenticator in step, free and with no limit on how many codes you keep.

Your browsers hold the key. The server only ever holds sealed boxes.

The company

Why a crow?

Keyrook is the brand of BRICK IT ALL LLC. A rook is two things: a piece in chess, and a bird of the crow family. Crows are known for picking things up and keeping them. Ours keeps a key.

It is drawn by hand, in crayon, on purpose. A security tool that looks like a person made it is easier to trust than one that looks like a vault door.

More about Keyrook

keep the key

Support

Questions, problems, security reports

Answers to the common questions are on the support page. For anything else, write to hello@keyrook.com.

Visit support Report a security problem