Is Macky Safe? Straight Answers About Security

Fair question. You're about to install an app that can see your Mac's screen and type into its terminal, so you should absolutely be asking how it's secured and what we can see. Here are straight answers.

Can Macky see my screen or my commands?

No. The connection between your Mac and your iPhone is end-to-end encrypted with DTLS-SRTP, the same encryption standard WebRTC video calls use. Your screen, your keystrokes, and your terminal output are encrypted on one device and decrypted on the other. Our servers can't read any of it.

Our server's only job is what's called signaling: it introduces your two devices to each other so they can open a direct connection. After that handshake, your data flows between your devices, not through us.

Does Macky record anything?

No. There's no session recording, no keystroke logging, no screenshot uploads. Sessions exist live between your two devices and nowhere else. What we store is what you'd expect from any account-based app: your account details and basic connection metadata, like when a session started.

What if someone steals my account password?

They still can't get into your Mac. Macky uses a separate Master Password that protects the actual session. Your account signs you in, but the Master Password is what unlocks a connection to your Mac, and it's checked by your Mac, not by our servers.

On top of that, your Mac keeps an allow list of devices. A new iPhone can't connect until the Mac has explicitly approved it. So an attacker would need your account, your Master Password, and an approved device.

The four layers, quickly

• End-to-end encryption: all session data travels inside an encrypted WebRTC tunnel.
• Blind signaling: our servers coordinate the handshake and never see session content.
• Master Password: a second password, separate from your account, gates every connection.
• Device allow listing: your Mac must approve each iPhone before it can ever connect.

Things you control

The Mac app lives in your menu bar, so you can always see it's running and disconnect a session with one click. Pro users also get connection logs, so you can review exactly when and from which device your Mac was accessed.

And the free plan works without a card, so you can poke at all of this yourself before trusting it with anything. That's the setup we'd want as users, so it's the one we built.