Writing
Security, in plain language
Notes from building a zero-knowledge password vault and an authenticator: the decisions behind them, the trade-offs we took, and the parts we would rather you heard from us than found out later.
Every factual claim about another product links to that vendor’s own page, with the date we last read it.
- Plain language 7 min read
What “zero-knowledge” actually means — and how to check it
The phrase is on every vendor’s homepage, ours included. It has a precise meaning, a set of things it does not cover, and four checks you can run without trusting anybody.
Read - Two factors 8 min read
Should your password manager store your 2FA codes?
Every major vault will keep a TOTP secret in the same record as the password it protects. That is genuinely convenient, and it quietly collapses two factors into one.
Read
Try the products the posts are about
A zero-knowledge vault with a free plan, and an authenticator whose codes are free and unlimited.