The short version
LAPSlock is a tool for retrieving credentials you are already authorized to retrieve. You are responsible for having that authorization. We provide the app as-is, we can't be liable for what happens with a password once it's on your screen, and we're not Microsoft.
The full terms are below. They're written to be read.
1. Who these terms are with
These terms are an agreement between you and Kainor LLC, a Kansas limited liability company ("Kainor", "we", "us"). They govern your use of the LAPSlock iOS application and the kainor.com website.
By using LAPSlock you accept these terms. If you don't accept them, don't use it.
2. What LAPSlock is
LAPSlock is a client application that reads device inventory, local administrator passwords, and BitLocker recovery keys from Microsoft Entra ID and Microsoft Intune, using the Microsoft account you sign in with.
LAPSlock does not store your organization's data on any server we operate, and it grants no access you don't already have. Every request runs with your existing Microsoft permissions.
3. Your responsibilities
This is the part that matters most for a tool like this.
- Authorization. You must be authorized by your organization to access the credentials you retrieve. LAPSlock enforces Microsoft's permissions, not your employer's policies. Having the technical ability to read a password is not the same as being permitted to.
- Handling. Once a credential is on your screen, protecting it is up to you. Don't screenshot it, don't send it over insecure channels, and don't leave your phone unlocked and unattended.
- Device security. Keep a passcode and biometric lock on the device you run LAPSlock on. The app requires owner authentication before revealing anything, which only helps if your device actually has it configured.
- Your Microsoft configuration. Consent, directory roles, Conditional Access, and audit logging are yours to configure. We don't manage your tenant.
4. Acceptable use
You may not use LAPSlock to access credentials you are not authorized to access, to circumvent your organization's security controls, or to assist anyone else in doing either. You may not use it to violate any applicable law.
We may decline to provide support, and may terminate a paid licence, if we have a reasonable belief that LAPSlock is being used for unauthorized access.
5. Licence to use the app
We grant you a personal, non-exclusive, non-transferable, revocable licence to use LAPSlock on devices you own or control, subject to these terms and to the Apple App Store's terms.
This is separate from the licence covering the published source code, which is PolyForm Strict 1.0.0 plus an additional permission for security review. The source is published so it can be audited. It is not open source, and it does not grant you the right to redistribute the app or publish your own build of it.
6. Trademarks
LAPSlock and Kainor are trademarks of Kainor LLC. Nothing in these terms or in the source licence grants you rights to use our name, logo, or app icon.
7. Microsoft dependency
LAPSlock depends entirely on Microsoft services. If Microsoft changes an API, restricts a permission, has an outage, or removes a capability, features may stop working through no fault of ours and with no notice to us.
One current example, stated plainly: Microsoft does not offer an API for reading macOS local administrator passwords, so LAPSlock cannot show them. That is a limitation of Microsoft's platform, not a feature we've withheld.
8. Paid features
Some features may require a paid subscription or licence. Where a subscription is purchased through the App Store, Apple handles billing, renewal, and refunds under its own terms, and you manage or cancel it in your Apple account settings. Where a licence is purchased directly from Kainor, the terms of that purchase apply in addition to these.
Prices may change. Changes will not affect an already-paid term.
9. No warranty
LAPSlock is provided "as is" and "as available", without warranties of any kind, whether express or implied, including any implied warranty of merchantability, fitness for a particular purpose, or non-infringement.
We do not warrant that LAPSlock will be uninterrupted, error-free, or that it will display a correct or current credential in every circumstance. Verify anything critical against the Microsoft admin center.
10. Limitation of liability
To the maximum extent permitted by law, Kainor LLC will not be liable for any indirect, incidental, special, consequential, or punitive damages, or for any loss of profits, data, goodwill, or business interruption, arising out of or relating to your use of LAPSlock.
To the maximum extent permitted by law, our total liability for all claims relating to LAPSlock is limited to the greater of (a) the amount you paid us for LAPSlock in the twelve months before the claim arose, or (b) fifty United States dollars.
Some jurisdictions do not allow certain limitations, in which case the limitations above apply only to the extent permitted.
11. Indemnity
You agree to indemnify Kainor LLC against claims, losses, and expenses arising from your use of LAPSlock in breach of these terms, including use to access credentials you were not authorized to access.
12. Termination
You may stop using LAPSlock at any time by deleting it. We may suspend or terminate your licence if you materially breach these terms. Sections 6, 9, 10, and 11 survive termination.
13. Governing law
These terms are governed by the laws of the State of Kansas, United States, without regard to its conflict-of-laws rules. Disputes will be brought in the state or federal courts located in Johnson County, Kansas, and you and we consent to that jurisdiction.
14. Changes to these terms
We may update these terms. The effective date at the top will change, and the previous version remains in the public repository's history. Continuing to use LAPSlock after a change means you accept the updated terms.
15. Not affiliated with Microsoft
LAPSlock is an independent product. Kainor LLC is not affiliated with, endorsed by, or sponsored by Microsoft Corporation. Microsoft, Microsoft Entra, Microsoft Intune, Windows, and BitLocker are trademarks of Microsoft Corporation. Apple and the App Store are trademarks of Apple Inc.
16. Contact
Kainor LLC, Spring Hill, Kansas, United States · connor@kainor.com