Loading page
About this tool
Score a third-party keyboard's full-access, clipboard, contacts and network permissions and see what to switch off.
The Keyboard App Permission Audit scores what a third-party keyboard can reach beyond the keys — network access, cloud dictionary sync, clipboard history, contacts and location — and returns a 0-100 privacy score with a ranked list of what to switch off. Being your keyboard is inherently high-trust: Android warns that an input method may collect all the text you type, including passwords and card numbers, and on iOS a keyboard cannot reach the network at all until you turn on Allow Full Access. The audit weights each item by sensitivity and by whether typing genuinely needs it.
Open Keyboard App Permission Audit on AltFTool — it loads instantly in your browser.
Add your input to the workspace.
Adjust the options until the result looks right.
Copy or download the output and put it to work.
Seeing your keystrokes comes with being a keyboard; network access, cloud sync and contacts do not.
Clipboard history and 'learn from my typing' are toggles, and they leak more than most runtime permissions.
Every row names the Android manifest constant or the iOS setting so you can find it and change it.
It can technically see any text typed through it, which is why Android shows an explicit warning when you enable one. Two things limit the damage: password fields marked secure are usually excluded from learning, and on iOS a keyboard is sandboxed with no network access until you turn on Allow Full Access.
It lets the keyboard extension talk to the network and share data with its containing app — required for cloud prediction, GIF search, translation and theme downloads. With it off, the keyboard runs sandboxed and cannot send anything you type off the device.
No. Contact access is offered so the keyboard can suggest names, but it already learns names as you type them, and granting it uploads details of people who never consented. Revoke it and let the personal dictionary do the work.
Yes, because password managers and OTP messages both work by copying to the clipboard, and a keyboard with clipboard history keeps those strings ready to paste. Android 12 and later shows a toast whenever an app reads the clipboard — turn history off or set it to auto-clear.