Rekey
Support
For anything — questions, bug reports, feature requests, or feedback — email hello@pinnaclepath.ai. A real person reads every message and usually replies within 24 hours.
Common questions
How do I check a password?
Open the Check tab, type the password into the field, and tap Check. Rekey compares it against a public corpus of leaked passwords and shows you the result along with a recommended next action.
Is my password sent to your servers?
No. Your password never leaves your device, and we operate no server that receives anything from the app. Rekey computes a one-way fingerprint locally and sends only the first five characters of it to the public Pwned Passwords service. The remaining 35 characters and the password itself stay on your iPhone. The comparison happens on your device.
Do you store the passwords I check?
Rekey processes the password in memory and clears the password entry field when a check starts. It does not save the plaintext password to disk, the keychain, or logs. Session reuse detection retains derived fingerprints in memory, not the plaintext password. You can clear those fingerprints using Clear session memory in Rekey's Settings. If you add a result to your cleanup plan, Rekey saves the label, action, progress, and associated result information, such as the exposure count. It does not save the password.
What does the exposure count mean?
It is how many times that exact password appears across known breach corpora. A high number means the password is common and almost certainly present in the wordlists attackers use. Any count above zero means you should stop using it.
It said “not found” but still warned me. Why?
Not appearing in breach data is not the same as being safe. Rekey also runs local pattern checks — length, predictable substitutions, dates, keyboard runs, repeated words. A password can be absent from every public breach and still be weak, so the app tells you both things instead of giving you a false all-clear.
The check failed or said it could not reach the service.
The check did not complete. Rekey did not receive a result. Check your connection and retry.
How does the cleanup plan decide the order?
By real-world blast radius. Accounts that can reset other accounts — your email first, then anything holding money, then cloud storage and social — come before low-stakes logins. Priority accounts you name yourself are pinned to the top.
What is included free, and what needs Pro?
Free gives you unlimited password checks, the full Learn library, and the first three items of your cleanup plan. Rekey Pro unlocks the complete plan, priority accounts, session-wide reuse detection, and the monthly re-check reminder.
How do I restore my subscription on a new phone?
Open Rekey → Settings → tap Restore Purchases. As long as you are signed into the same Apple ID that subscribed, your access will restore automatically.
How do I cancel my subscription?
Open the iOS Settings app → tap your name at the top → Subscriptions → find Rekey and tap Cancel Subscription. You keep access until the end of the current billing period.
How do I request a refund?
App Store refunds are handled by Apple. Visit reportaproblem.apple.com, sign in, and submit a refund request. If you have trouble, email us and we will help.
How do I turn the monthly reminder on or off?
Open Rekey → Settings → Monthly re-check reminder. This is the only permission the app ever asks for, and only when you switch it on. If you previously denied notifications, enable them in iOS Settings → Notifications → Rekey.
How do I delete my data?
To reset your local app data, open Rekey → Settings → Reset all local data, then confirm Reset everything. This resets the cleanup plan, priority account labels, reading progress, preferences, session memory, and local reminders. Use this control before uninstalling rather than relying on uninstalling alone to clear keychain records. Deleting local app data does not cancel an Apple subscription or delete support emails.
Does Rekey replace a password manager?
No, and it does not try to. Rekey does not store or generate passwords. It tells you which of your passwords are compromised or weak and gives you an ordered plan to fix them — your password manager (including the one built into iOS) is where the new passwords should live.
I have a feature request.
Send it to hello@pinnaclepath.ai. We read every one and good ideas often make it into updates.