8 min read By NT²
Wrong password must fail closed
Tech
Unlock is not a best-effort decrypt of everything you own. NT² checks a small local verifier first. Wrong password fails closed: the vault stays locked, and the UI stays honest.
Tagged: crypto
7 posts
1 min read By NT²
Hardware wallet setup day
Stories
You bought the hardware wallet for safety. Setup day is when that safety either becomes a habit or turns into another note you hope you never lose.
9 min read By NT²
Auto-lock is a memory hygiene problem
Tech
Encryption at rest is incomplete if the decrypted key handle outlives the unlocked session. NT² treats auto-lock as memory hygiene: non-extractable CryptoKeys, in-memory only, cleared on idle, refresh, and tab close.
1 min read By NT²
1Password holds logins; where do mnemonics go?
Stories
A seed phrase does not have a login form. That small fact explains why some assets need a different kind of vault.
9 min read By NT²
The KDF salt stays on your device
Tech
A salt is not a secret. Still, where it lives changes who can assemble a password-guessing system. NT² keeps the KDF salt and password verifier with the local vault, so unlocking begins and ends on the device.
2 min read By NT²
Not another password manager login
Stories
Website logins already have good tools. The harder question is where to keep the secrets that are not just username, password, and URL.
3 min read By NT²
Your seed phrase shouldn't live in Apple Notes
Stories
If your recovery phrase is in Apple Notes, iCloud is doing backup. That is not the same as zero-knowledge—and it is not the same as structured, masked fields with auto-lock.