About KeyNesta

Updated 21 September 2026.

KeyNesta is a two-factor authentication app built by BitsSolved Software, a sole proprietorship registered in India. It exists because authenticator apps are designed for people with five accounts, and a lot of us stopped having five accounts around a decade ago.

The problem we actually had

A developer or sysadmin accumulates 2FA the way a house accumulates keys: a personal email, a bank, two cloud providers, a registrar, a package registry, a handful of servers, then one set per client. At some point the authenticator becomes a wall of six-digit codes in the order you happened to add them, half of them labelled things like "Amazon Web Services" three times over with no indication of which account is production.

The usual answers are search and resignation. We wanted structure: separate vaults for things that must not mix, spaces inside them, folders that nest, tags that cut across the folders, and search that knows the folder path. That is the whole product thesis, and it is why managing many accounts is the use case we design for first.

What we believe about security copy

This category is full of phrases like "military-grade encryption", which means nothing, and "your data is safe with us", which is a promise rather than a mechanism. We write the mechanism instead: AES-256-GCM, scrypt at N=2^15, a random master key wrapped by your passphrase, ciphertext on the server and nothing else. It is checkable, which is the point — see the encryption architecture.

The same rule applies to limits. Zero-knowledge means we cannot reset a forgotten passphrase, browser storage is not hardware-backed, clipboard clearing is best-effort, and KeyNesta has not had an independent cryptographic audit yet. All four are on the site in the places where someone deciding whether to trust us would look for them. A security product that only publishes its strengths is telling you how it handles inconvenient facts.

How it is built

One encryption and OTP core, shared by the web app, the iPhone app and the Android app, so a vault behaves identically everywhere and there is one implementation to get right rather than three. Standard primitives only, from audited open-source libraries. Open standards for the data — otpauth://, TOTP, HOTP — which is what makes imports and exports possible in both directions.

The sync backend stores ciphertext and version numbers. It was designed that way from the first commit rather than retrofitted, which matters: end-to-end encryption added to a product that already shipped without it tends to arrive with exceptions.

What we will not do

• No ads and no data sales. An authenticator knows every service you have an account with. Monetising that inventory is disqualifying at any price.
• No lock-in. Export works, always, including the day you leave. Backups are files you hold.
• No invented cryptography. If a primitive is not standard and audited, it is not in the app.
• No third-party analytics on this website. There are no third-party requests and no cookies on any page here; visit counts come from our own server logs and are deleted after 14 days. It was removed deliberately, which felt like the minimum given what the product claims.

Who is behind it

KeyNesta is a product of BitsSolved Software, a sole proprietorship registered in India under MSME Udyam registration UDYAM-TN-09-0109230, with its registered office in Nagercoil, Kanniyakumari District, Tamil Nadu. The full legal details are in the terms of service and privacy policy. It is a small operation, and we would rather say so than imply a floor of engineers behind a plural pronoun.

Say hello at hello@keynesta.com, ask for help at support@keynesta.com, or report a vulnerability at security@keynesta.com.

Frequently asked questions