Terms of service

Published 19 September 2026. Effective 19 September 2026.

These terms are the agreement between you and BitsSolved Software ("we", "us"), the company behind KeyNesta, covering the KeyNesta apps, the web app at app.keynesta.com, the optional sync service, and this website. Using any of them means you accept these terms. They are written to be read; if something here is unclear, ask us.

What KeyNesta is

KeyNesta is a two-factor authentication app. It stores the secrets your accounts give you and generates one-time codes from them, following the TOTP and HOTP standards. The codes are computed on your device. We grant you a personal, non-exclusive, revocable licence to use the software for your own accounts, or for accounts you are authorised to administer at work.

KeyNesta is not a password manager, a backup service for anything other than your own vault, or a replacement for the recovery codes your accounts issue you. Keep those recovery codes somewhere separate.

Your passphrase is not recoverable

This is the most important clause on the page. Your vault is encrypted with a key derived from your passphrase, on your device. We never receive that passphrase, so we cannot reset it, recover it, or open your vault for you. Not for you, not for anyone claiming to be you, not under any support request.

If you forget it and have no backup, the vault stays sealed permanently, and the accounts inside it may need to be recovered one by one through each service's own process. You accept that risk when you create a vault. Keep your passphrase in a password manager or somewhere genuinely safe, and keep at least one encrypted backup outside your phone.

Sync accounts

The app works with no account at all. If you want your vault on more than one device, you can create a sync account with an email address, or sign in with Google. In that case:

• You are responsible for keeping your account credentials secure, and for the devices you sign in on. You can review and revoke devices at any time in the app.
• You must give an email address you control, and keep it current, because it is the only way we can reach you about the service.
• You must be old enough to enter into a contract where you live, and in any case at least 13.
• One account is for one person. Do not share credentials.

The sync service stores ciphertext it cannot read, which is described in the security architecture and the privacy policy.

Acceptable use

Do not use KeyNesta to break the law, to store credentials you have no right to hold, or to attack the service. Specifically, do not attempt to gain unauthorised access to our systems or another user's data, do not use automated means to overload the sync service, and do not resell the service as your own.

Security research is welcome. If you find a vulnerability, report it to security@keynesta.com and give us reasonable time to fix it before disclosing. We will not pursue good-faith research that follows that path.

What it costs

Everything in the app today is free, including sync. We plan to introduce a paid tier later for extras such as automatic cloud backups, more synced devices and smart groups. Code generation, manual encrypted backups and export will stay free.

If a feature you rely on ever moves behind a paid tier, we will tell you before it happens and give you time to export your data. There is no billing in the service today, so nothing here creates a payment obligation.

Your data stays yours

You own your vault and everything in it. We claim no rights over your data beyond storing the encrypted form of it so sync can work. You can export at any time in standard formats, and you can delete your sync account from inside the app, which erases your email, password hash, encrypted objects, key slot and device records from our servers. Vaults on your own devices are untouched by that and keep working offline.

Availability and changes

The sync service is provided as it is, with no uptime guarantee. We may change, suspend or discontinue parts of it. If we ever shut the sync service down, we will give reasonable notice so you can export or keep using the app offline, which it is designed to do.

Codes are generated on your device and do not depend on our servers, so an outage on our side does not stop you logging in to your accounts.

No warranty

KeyNesta is provided "as is" and "as available", without warranties of any kind, whether express or implied, including any implied warranty of merchantability, fitness for a particular purpose, or non-infringement. We do not warrant that the service will be uninterrupted, error-free, or that it will meet your requirements.

We take security seriously and document our design publicly, but no software is free of defects. Some jurisdictions do not allow the exclusion of implied warranties, so parts of this section may not apply to you.

Limitation of liability

To the maximum extent the law allows, we are not liable for indirect, incidental, special, consequential or punitive damages, or for lost profits, lost data, or loss of access to accounts, arising from your use of or inability to use KeyNesta. This includes losses caused by a forgotten passphrase, a lost device, or a missing backup.

Where liability cannot be excluded, our total liability is limited to the amount you paid us for the service in the twelve months before the claim, which for a free account is zero. Nothing here limits liability for fraud, or for anything else that cannot be limited by law.

Ending it

You can stop using KeyNesta at any time and delete your sync account from inside the app. We may suspend or end a sync account that breaks these terms, or that we must act on for legal reasons. Where it is reasonable and lawful to do so, we will tell you first and give you a chance to export your data.

Changes to these terms

We may update these terms as the product changes. The date at the top always shows the current version. For changes that meaningfully affect your rights, we will give notice on this site and, if you have a sync account, by email before they take effect. Continuing to use KeyNesta after that means you accept the new terms.

Governing law

These terms are governed by the laws of India, without regard to conflict-of-law rules, and the courts of Nagercoil, Tamil Nadu, India have jurisdiction over any dispute. If you are a consumer, this does not remove the protection of mandatory laws in your own country of residence.

If any part of these terms is found unenforceable, the rest stays in force.

Contact

BitsSolved Software, a sole proprietorship registered in India (MSME Udyam registration UDYAM-TN-09-0109230), at 13-124A, Manalivilagathu Veedu, Kalkulam, Thickanamcode, Nagercoil, Kanniyakumari District, Tamil Nadu 629804, India.

General questions: hello@keynesta.com. Support: support@keynesta.com. Security reports: security@keynesta.com. Privacy: privacy@keynesta.com.