Check the common questions below first — most issues are covered. If yours isn't, use the form at the bottom and we'll reply within 24 hours.
KeyStack uses macOS LocalAuthentication to unlock the vault. If Touch ID doesn't appear, check System Settings → Touch ID & Password and make sure Touch ID is enrolled. On Macs without Touch ID, KeyStack will fall back to your login password. If you're on a Mac connected to an external keyboard, the Touch ID prompt may appear on the built-in sensor rather than the keyboard.
No — this is intentional. KeyStack locks automatically on focus loss to prevent secrets from being visible if you step away from your desk or share your screen. One authentication unlocks the vault for the current session; switching apps resets it. This matches the security model described in the App Store listing.
KeyStack scans for files named .env, .env.local, .env.development, .env.staging, .env.production, and .env.test in the folder you select. Files with different names (e.g. .env.custom or environment.env) won't be picked up automatically. If your files aren't being found, confirm the exact filenames in Finder first. The app is sandboxed — you must grant access to the folder via the system file picker; it cannot access directories you haven't explicitly opened.
If a variable already exists in the project with the same key, the import flags it as a duplicate and skips it to avoid overwriting. Review the import preview screen — duplicates are highlighted in red. To overwrite an existing value, delete the variable first and then re-import.
Go to System Settings → Notifications → KeyStack and make sure notifications are allowed. KeyStack requests notification permission the first time you set a rotation interval — if you declined that prompt, you'll need to re-enable it manually in System Settings. Notifications are delivered by macOS; if Do Not Focus is active, they may be queued.
No. By design, KeyStack stores everything exclusively in the local macOS Keychain and makes zero network requests. There is no iCloud sync, no account, and no cloud backend. This is a deliberate privacy trade-off — your secrets never leave the machine. To move variables to another Mac, use the Export feature to write a .env file, transfer it manually, and import on the new machine.
KeyStack requires macOS Sonoma (14.0) or later. It runs on macOS Sequoia (15) as well. It is not compatible with macOS Ventura (13) or earlier.
App Store purchases are handled by Apple. Visit reportaproblem.apple.com to request a refund — Apple processes these directly and NerdSnipe Inc. is not involved in the transaction. Refund decisions are made by Apple.
Include your macOS version and a description of what happened. We respond within 24 hours on weekdays. You can also email us directly at hello@nerdsnipe.cc.