The archive
Ideas worth keeping.
Notes from the people building Sealzi—about privacy, considered design, and a more human relationship with software.
What actually happens when a password manager's servers go down
Your vault being encrypted and your vault being reachable are two different promises. A short login incident this week is a clean way to see why, and what to check about the tool you use
Everyone promises zero-knowledge encryption — four cryptographers went and checked
Zero-knowledge encryption is a promise about one opponent: the company holding your vault. Four cryptographers spent a year testing whether four password managers were keeping it.
Here is our signing key — and why one copy of it proves nothing
Every Vauz release is signed with the same minisign key. Here it is, with the three commands that check a download — and why one copy of a key proves nothing.
The clickjacking attack that steals passwords — and how Vauz stops it
Researchers showed that one invisible click can drain a password manager's autofill. Vauz 1.4.2 answers with an approval prompt the page cannot draw over — Touch ID, or your V-Key.
Privacy shouldn't be a setting
Privacy already feels boring because everyone ignores it. It should feel boring because it is on by default, not buried in a settings menu.
How Vauz keeps your secrets local
On-device design changes more than storage—it changes who has to earn your trust.