Archive
Latest stories →Every story in release order. Start with the oldest post, then use Next story at the bottom of each article to read forward.
- Metadata in SQLite, ciphertext in BlobStore
- Structured security under three dollars
- FTS5 for titles; table scan when filters win
- Offline by default is not offline-only
- Never load the whole vault into Svelte state
- Look at my screen, not my vault
- The account database must not become a password oracle
- Timed reveal on a video call
- One sync hub for one vault identity
- Sent to me means ciphertext to you
- No password reset, by design
- Something arrived in my Inbox
- Blind replica sync on the edge
- Sometimes a USB stick beats email
- Why our vault SQLite database lives in OPFS, not IndexedDB
- One-time disclosure for your lawyer or accountant
- Unlocking a local vault is not logging in to the cloud
- Send production keys to my co-founder, not the whole vault
- One key per object: envelope encryption inside NT² Vault
- Ten thousand items, still a vault
- The KDF salt stays on your device
- Work vault, personal vault
- How one person builds and operates NT² Vault with AI agents
- Three Stripe keys, three environments
- Embassy appointment, no signal
- Not another password manager login
- Why host a heavy server when a PWA can do everything locally? Built a zero-server privacy vault.
- Mom keeps passwords in a paper notebook
- The spreadsheet on my Desktop
- Threshold Vault and Key DID: identity without handing over the keys
- Recent updates — late June 2026
- You pasted the API key in Slack
- When your landlord asks for ID on WhatsApp
- They only needed the last four digits
- Your seed phrase shouldn't live in Apple Notes
- Split rent without screenshotting banking apps
- Null Trust² — what the name means
- Welcome to the NT² Blog