9 min read By NT²
Blind replica sync on the edge
Tech
Sync does not have to turn a local vault into a cloud database. The edge can identify an account, store opaque replica frames, and deliver updates without learning what those updates contain.
Stories
Product narratives about structured privacy, local-first vaulting, and encrypted handoffs.
1 min read By NT²
Sometimes a USB stick beats email
Stories
If the file is too sensitive for a chat thread, sending it through one more inbox is not automatically better.
9 min read By NT²
Why our vault SQLite database lives in OPFS, not IndexedDB
Tech
SQLite wants a file. A privacy vault wants durable relational storage that stays fast as its item count, indexes, and encrypted attachments grow. Putting a SQLite virtual file system on IndexedDB can bridge those worlds, but it makes the bridge part of every database operation. For NT² Vault, the browser vault file belongs in the Origin Private File System.
2 min read By NT²
One-time disclosure for your lawyer or accountant
Stories
Your accountant needs the statement today. They do not need a permanent copy sitting in three inboxes and a downloads folder.
9 min read By NT²
Unlocking a local vault is not logging in to the cloud
Tech
One screen can make two security events look like a single login. We keep them separate because opening encrypted data and proving an identity to a server are different jobs with different risks.
2 min read By NT²
Send production keys to my co-founder, not the whole vault
Stories
Your co-founder needs the production key before a weekend deploy. They do not need your personal vault, your old notes, or a zip file of everything.
9 min read By NT²
One key per object: envelope encryption inside NT² Vault
Tech
A vault can encrypt everything with one key and still claim that its data is encrypted. We wanted a more useful boundary: each item and attachment gets its own content encryption key, while the vault key protects those keys.
2 min read By NT²
Ten thousand items, still a vault
Stories
The first fifty items are easy. The real test is whether a vault still feels calm after years of credentials, documents, bank records, and notes.
9 min read By NT²
The KDF salt stays on your device
Tech
A salt is not a secret. Still, where it lives changes who can assemble a password-guessing system. NT² keeps the KDF salt and password verifier with the local vault, so unlocking begins and ends on the device.
1 min read By NT²
Work vault, personal vault
Stories
Your laptop holds client API keys, a family insurance policy, and a crypto wallet note. The problem is not storage space. It is boundaries.