Sidekey 1.0.0 (withdrawn: security issue)

Security notice (7 October 2026): this release has been withdrawn.

Sidekey 1.0.0 for Mac accepted connections from any device that could reach the Mac over a network (Wi-Fi, Ethernet or VPN, not only shared Wi-Fi) without pairing, and ran the action that device sent, including shell commands, AppleScript and keystrokes. Such a device could run commands on your Mac as you, and could see which app you were using and its window titles.

Only the Mac app 1.0.0 download is affected. The iPad app needs no action.

If you installed it:

1. Quit Sidekey from the menu bar and delete it from Applications. Delete the downloaded Sidekey.dmg too.
2. Remove Sidekey from System Settings › Privacy & Security › Accessibility and › Automation.
3. If you used it on a network you do not fully trust, treat the Mac as possibly accessed by someone else: check for unexpected files, login items and running processes.

Fixed in Sidekey 1.1.0, which runs only its own built-in actions and requires pairing with your iPad. To use 1.1.0, the iPad app needs build 3 or later.

---

First public release of Sidekey for the Mac.

Sidekey turns an iPad into a shortcut deck that follows the app in front on your Mac. This download is the Mac menu bar app. The iPad app is in a private TestFlight beta and will come to the App Store later; until then, build it from source as described in the README's Build from source section.

Install

1. Download Sidekey.dmg below, open it and drag Sidekey to Applications.
2. Open Sidekey. It lives in the menu bar.
3. When macOS asks, switch Sidekey on in System Settings › Privacy & Security › Accessibility. Sidekey needs this to send shortcuts and read window titles. Allow Automation and Local Network access too if macOS asks.

Requires macOS 13 or later. Signed with Developer ID and notarized by Apple.

What's in 1.0.0

• Layouts for System, Xcode, VS Code, Terminal, Safari, Chrome, Arc, WhatsApp, Telegram, Zoom and MacDown, switching with the frontmost app.
• Sends the frontmost app's icon, window title and Accessibility status to the iPad.
• Reports the Mac's result for every tap, including why it failed, and rejects taps on a layout that changed under your finger.
• The iPad connects over USB when plugged in, with Wi-Fi as the fallback.

Known limits

• Zoom meeting state (mic, camera, sharing, recording) is built from Zoom's documented menus and not yet tested in a live meeting.
• The menu bar's "Open Settings..." item does nothing yet.

SHA-256: 92ff8d9c3a094a27def5958ce82ddd0e6083c5f0374f0df836356763fb7b6d60