API Key Security
Where your API key is stored and how to remove it.
If you use OpenAI, Gemini, or Claude to polish your dictation, you bring your own API key. Here is where that key is kept and how to take it back out.
Stored in the macOS Keychain
Your key goes into the macOS Keychain, the same place the system keeps your other passwords. It is protected by your login and encrypted at rest, and no other user account on the Mac can read it.
If you used an early version of EnviousWispr, your key may have started out in an older file store. The app moves the key into the Keychain the next time it is used, and clears the old file afterwards.
Where your key does and does not go
- It is never written to logs.
- It is never included in usage or crash data.
- It goes nowhere except the provider you chose, to prove the request is yours.
Removing a key
Clear the field. Open Settings, select AI Polish, and clear the key field. The stored key goes with it.
You can also revoke the key from your provider’s own dashboard at any time, which takes effect immediately regardless of what EnviousWispr does.