8 min read By NT²
Wrong password must fail closed
Tech
Unlock is not a best-effort decrypt of everything you own. NT² checks a small local verifier first. Wrong password fails closed: the vault stays locked, and the UI stays honest.
Stories
Product narratives about structured privacy, local-first vaulting, and encrypted handoffs.
1 min read By NT²
Moving abroad means a new admin stack
Stories
A new country comes with a new set of numbers: visa, residence card, bank account, tax ID, insurance, landlord forms, and appointment PDFs.
9 min read By NT²
CBF is how structured fields leave RAM
Tech
A credential is a map of fields while you edit it. The moment those fields must survive a lock, a restart, or a replica, they need a portable ciphertext shape—not a JSON dump waiting for the next reader.
1 min read By NT²
Hardware wallet setup day
Stories
You bought the hardware wallet for safety. Setup day is when that safety either becomes a habit or turns into another note you hope you never lose.
9 min read By NT²
Auto-lock is a memory hygiene problem
Tech
Encryption at rest is incomplete if the decrypted key handle outlives the unlocked session. NT² treats auto-lock as memory hygiene: non-extractable CryptoKeys, in-memory only, cleared on idle, refresh, and tab close.
1 min read By NT²
E2E chat is not a vault
Stories
Signal can protect a message on the way to someone else. It does not turn the thread into structured storage.
8 min read By NT²
SQLite in a Web Worker is not optional
Tech
A local-first vault needs a real relational engine on device. Putting that engine on the UI thread makes every page query compete with paint and input. NT² Vault runs SQLite in a Web Worker, behind typed messages and a single lock chain, so the list can stay responsive while the database stays honest.
1 min read By NT²
Already local-first, missing structure
Stories
If you already keep secrets in a local database, you may not need convincing about the cloud. You may need better structure.
9 min read By NT²
Selective SSI — not a general DIDComm wallet
Tech
Self-sovereign identity is useful when you take the parts that fit a zero-knowledge vault—and refuse the parts that turn the product into a general DID wallet.
1 min read By NT²
1Password holds logins; where do mnemonics go?
Stories
A seed phrase does not have a login form. That small fact explains why some assets need a different kind of vault.