Rekey
Change the locks that already leaked.
When you lose a key, you do not buy a stronger door — you have the lock rekeyed so the old key stops working. Rekey tells you which of your passwords are already in the hands of strangers, and in what order to change them.
Most break-ins are not hacks
Attackers rarely break anything. They take a password leaked by some forgotten site and try it on your email, your bank, your everything. It works often enough to be an industry. The fix is not a stronger password in one place — it is finding every lock the old key still opens.
Your password never leaves your phone
Rekey computes a one-way fingerprint of the password on your device and sends only the first five characters of it to the public Pwned Passwords service. Hundreds of candidate results come back, and the final comparison happens locally. The request does not identify which returned entry matched, and the password itself never leaves your iPhone.
Rekey processes the password in memory and clears the password entry field when a check starts. It does not save the plaintext password to disk, the keychain, or logs. Session reuse detection retains derived fingerprints in memory, not the plaintext password. You can clear those fingerprints using Clear session memory in Rekey's Settings. There is no account, no analytics, no crash reporter, and no advertising code — and no server of ours involved at any point.
What you get
- Check a password without sending itYour phone turns the password into a one-way fingerprint and sends only its first five characters. The comparison happens on your device.
- A straight answer, with the countIf a password appears in breach data, you see how many times. If it does not, you still see what the local pattern checks found — length, dates, keyboard runs, predictable substitutions.
- One specific next actionEvery result ends with a single instruction you can act on now, not a score to interpret.
- A cleanup plan in risk orderEmail first, because it is the reset path for everything else. Then money, then reuse, then second factors, then what to delete.
- Priority accountsName your email, bank, and cloud account once. They stay pinned to the top of every plan.
- A Learn library that assumes nothingShort, plain explanations of credential stuffing, authenticator apps, passkeys, and recovery codes. Free, all of it.
Free and Pro
Unlimited password checks, the full Learn library, and the first three items of your cleanup plan are free, permanently. Rekey Pro unlocks the complete plan, priority accounts, session-wide reuse detection, and the monthly re-check reminder.
What Rekey is not
It is not a password manager — it does not store or generate passwords, and your manager (including the one built into iOS) is where new passwords should live. It is not a security audit or a guarantee that an account is safe. A password absent from public breach data has not been proven good; it has only not been found yet. Rekey is a hygiene tool that tells you which locks to change first.