Your own key, without exposing it to the app.

What happens when you connect a key

• Your key travels to Ferra’s backend over HTTPS.
• Ferra validates it with OpenRouter.
• The backend stores the key encrypted with a server-held encryption key.
• The plaintext key is not stored in the app and is never returned by the API after submission.

What the iPhone stores

The app stores its own Ferra session token in the device Keychain, not your OpenRouter key. The backend stores a cryptographic hash of that session token.

What BYOK changes

Requests use your OpenRouter account and its charges and terms. Free-start requests use the developer’s account instead. Usage separates model-reported cost and whether the free account was used.

How to remove your key

Open Settings in Ferra and remove the connected OpenRouter key. You can also delete your entire account, which removes the encrypted key with the rest of your active account data.

Good security habits

Never paste a key into a chat or send it to support. Use OpenRouter’s own controls for account limits and revoke a key there if you believe it has been exposed.