Is Bongo Cat Safe? The Keylogger Question
Scope: Developer statements and official announcements only; this page is not a security audit
Key points
- The developer says Bongo Cat only counts how many keys you press and does not process them any further.
- The developer says the code is not obfuscated and ships with .pdb files, so anyone with the skills can inspect it; this page has not audited it.
- Online features grew over time: multiplayer, chat, Discord integration and the Paw Pass all arrived after the early 'no internet needed' statements.
- No official rule on auto clickers has been published; the only official automation is The Typer Was Replaced collab.
Bongo Cat is a Steam release from Irox Games, and the developer says it only counts how many keys you press and does not process them any further. The developer says the code is not obfuscated and ships with .pdb debug files so it can be inspected. This page collects those statements with dates; it is not a security audit.
Why do people ask whether it is a keylogger?
A tapping pet has to notice every key press and click, even while another window is focused, and that is also what a keylogger does. The Steam discussions have many threads asking the same thing, from launch week to 2026. The difference between the two is what the program does with each press, and that is the part only the developer's statements and the code itself can answer.
What has the developer said about keylogging?
All of these were posted by the account with the [developer] badge in the official Steam discussions:
| When | Statement (quoted) | Thread |
|---|---|---|
| March 2025 | "i just count how many keys are pressed i don't process them any further" | Keylogger or crypto miner? |
| March 2025 | Mining: "there i no real impact regarding GPU/CPU" | Same thread |
| April 2025 | "the game requires no internet connection so it can't send out anything"; "i ship the .pdb files so you can take a look what the code does" | Keylogger or malware? |
| April 2025 | "the code is not obfuscated for that reason, so you can just look at the code yourself with softwares like dnspy" | Key tracker thread |
| 2025 | "no there is no malicious code but yes let others verify it for you.." | Has anyone verified? |
The developer also argued that Windows Defender and similar antivirus tools would flag the app if it logged keys to a file or sent them over the internet. That is the developer's reasoning, not a test result, so treat it as context rather than proof.
Does Bongo Cat connect to the internet?
The early "no internet connection" answer describes the app as it was in 2025. Since then several online features have shipped, each announced by the developer:
- Multiplayer lobbies, handled "by Steam, so no servers" (August 2025).
- Anonymised analytics through Steam Stats, "mainly used by me to see what costume you pick" (October 2025).
- Lobby chat, which can be disabled in the Multiplayer tab (April 13, 2026), and a Discord integration that can be switched off in settings (April 2026).
- The Paw Pass, which cannot be redeemed offline (September 2026).
None of these announcements describe sending your typed keys anywhere. If you want the smallest footprint, you can turn off the Discord integration and chat, and skip multiplayer; single-player tapping and chest drops still work.
Will an auto clicker get you banned?
No official rule has been published either way. We searched the Steam discussions for auto clicker, macro and ban threads on September 29, 2026, and none of the replies we read from the developer allows or forbids them. The closest statement is the developer telling a player who asked for a clicker that "typing 1000 letters in 30min should be possible :P no need for clickers" (reply). Asked for an automatic chest-opening feature, the developer replied that it "won't be a feature sorry, it's always meant to be similar like a pomodoro timer" (Auto-Chest thread).
The only automation the studio itself promotes is The Typer Was Replaced, a collaboration where The Farmer Was Replaced's tap() function drives your cat; you need to own that game. There is also no official "unlock all" method for items or achievements. When the 5 million tap achievement drew backlash, the developer removed it from Steam and said it would come back as an in-game achievement, "just not in Steam" (announcement thread). As of September 29, 2026 the Steam list includes a 5 million tier (Bongo Beat Sapphire); no announcement says whether it is the achievement that was removed in February. For what each milestone takes, see the achievements page.
Can it cause trouble in other games?
| Question | Developer's answer | Source |
|---|---|---|
| VAC ban in CS2? | "nope, but cs2 will kick you out of the ranked lobby if you have it over the same window ... but no bans tho" | CS2 thread |
| Clicks not counted in a game | Use the opt-in admin mode | How to play |
| Hovering the cat tabbed you out of a fullscreen game | Fixed in the March 11, 2025 update | Patch notes |
Why would a tapping app want administrator rights at all? Admin mode is opt-in. The March 11, 2025 update introduced it, saying "this will make Bongo Cat start as admin, which solves a lot of issues regarding clicks not getting tracked in several games" (patch notes). Leave it off unless clicks in a specific game are not being counted.
That CS2 answer is the developer's view, not a statement from Valve. If you play competitive games with strict anti-cheat, the cautious choice is to close Bongo Cat for those sessions. Display and admin-mode fixes are on the Steam Error and fixes page.
Sources
The mechanics and numbers in this guide come from the material below. Open the original pages to check them yourself.
- S001 Keylogger or crypto miner? steamcommunity.com Accessed
- S002 Keylogger or malware? steamcommunity.com Accessed
- S003 Key tracker thread steamcommunity.com Accessed
- S004 Has anyone verified? steamcommunity.com Accessed
- S005 CS2 thread steamcommunity.com Accessed
- S006 October 2025 store.steampowered.com Accessed
- S007 August 2025 store.steampowered.com Accessed
- S008 April 2026 store.steampowered.com Accessed
- S009 reply steamcommunity.com Accessed
- S010 announcement thread steamcommunity.com Accessed
- S011 Patch notes store.steampowered.com Accessed
- S012 April 13, 2026 store.steampowered.com Accessed
- S013 Auto-Chest thread steamcommunity.com Accessed
Related guides
Bongo Cat Steam Error: Fixes and Hotkeys Guide
Bongo Cat Steam Error explained: why the popup appears, how to check whether your drop went through, the timer resync fix, and display hotkeys.
All 28 Bongo Cat Achievements and Unlock Rates
All 28 Bongo Cat Steam achievements with the exact requirement text and global unlock rates, grouped by taps, items, emojis, lobbies and exchanges.
How to Play Bongo Cat: Taps, Chests and Drops
How Bongo Cat works on Steam: key presses become taps, chests open on the timer the developer set (30 minutes in 2025), and duplicates exchange up.
