Archive
Latest stories →Every story in release order. Start with the oldest post, then use Next story at the bottom of each article to read forward.
- Recovery kit or backup file?
- .nt2backup as a sovereignty format
- We removed features on purpose
- Bring your passwords, leave the spreadsheet
- The Receive hub is not a downloads folder
- Custom templates start from duplicate
- Same vault UI in browser, PWA, and desktop shells
- Tags are in production
- Joint finances without a shared phone
- Pin what matters, let recents find themselves
- Vault checkup is one list, not four chores
- Vault profile is section KV, not one mega-row
- Birth certificate and insurance
- Schema v60 and incremental migration
- Tax season: the accountant asks for documents
- Wrong password must fail closed
- Moving abroad means a new admin stack
- CBF is how structured fields leave RAM
- Hardware wallet setup day
- Auto-lock is a memory hygiene problem
- E2E chat is not a vault
- SQLite in a Web Worker is not optional
- Already local-first, missing structure
- Selective SSI — not a general DIDComm wallet
- 1Password holds logins; where do mnemonics go?
- Relay indexes ciphertext; Inbox stays local
- I outgrew Apple Notes
- Share passphrase ≠ master password
- Your data, your jurisdiction
- Challenge–response, not bearer email
- Escape hatch, not lock-in
- One unlocked vault per tab — by design
- No analytics on the marketing site
- Metadata in SQLite, ciphertext in BlobStore
- Structured security under three dollars
- FTS5 for titles; table scan when filters win
- Offline by default is not offline-only
- Never load the whole vault into Svelte state
- Look at my screen, not my vault
- The account database must not become a password oracle
- Timed reveal on a video call
- One sync hub for one vault identity
- Sent to me means ciphertext to you
- No password reset, by design
- Something arrived in my Inbox
- Blind replica sync on the edge
- Sometimes a USB stick beats email
- Why our vault SQLite database lives in OPFS, not IndexedDB
- One-time disclosure for your lawyer or accountant
- Unlocking a local vault is not logging in to the cloud
- Send production keys to my co-founder, not the whole vault
- One key per object: envelope encryption inside NT² Vault
- Ten thousand items, still a vault
- The KDF salt stays on your device
- Work vault, personal vault
- How one person builds and operates NT² Vault with AI agents
- Three Stripe keys, three environments
- Embassy appointment, no signal
- Not another password manager login
- Why host a heavy server when a PWA can do everything locally? Built a zero-server privacy vault.
- Mom keeps passwords in a paper notebook
- The spreadsheet on my Desktop
- Threshold Vault and Key DID: identity without handing over the keys
- Recent updates — late June 2026
- You pasted the API key in Slack
- When your landlord asks for ID on WhatsApp
- They only needed the last four digits
- Your seed phrase shouldn't live in Apple Notes
- Split rent without screenshotting banking apps
- Null Trust² — what the name means
- Welcome to the NT² Blog