We'll never know...
We built this service with a clearly defined manifesto; Build a zero knowledge, safe and secure platform, that can store the most sensitive of information. We wanted something that we couldn't see the data our users enter.
In a world of constant hacks and leaks, we wanted something secure, built for business, and most importantly something we could trust.
Years of beta
We've just launched as an exclusive invitation only service, but we've been using this for a few years privately.
After many changes to the look and feel of the site and various improvements to the enhance user experience we feel like the time to launch is now.
What can we see?
Well... let's say you use the password 'password' for a site, (please do not!!!) we encrypt the data using your own encryption key before sending it to our server. We might see something like:
U2kV9RDEdYpAdBqZxQC6gFKlWYBqpLpqyg4IIVaZ37sUS2wRpld07K92WYy2Ea0HMFsdGVkX19ERxywvXjHLQo5rpdgaGwQ/PXm5XHkhmczX3kbY0Xm6wx5zGP0z/bsxuOdt8ykh+WfHTZiIcVgV9ekaili6bCsNYG7a4KoD9d4W1Y8xjlGSiHmZVy355mIR
Can't see the password? - Neither can we, and we simply can't ever know it. It can only be decrypted with your encryption key, which is never sent to our servers! 🥳
Take the first step in securing your data by registering your interest.
So everything is encrypted?
Yes. All of your secrets (even folder names) are encrypted. We are absolutely unable to view encrypted data. So much so, that we cannot help you if you forget your encryption key.
We highly suggest you keep a copy of your encryption key and store it in a safe place.
The only data that remains unencrypted are identifiers so that when you log in we can retrieve your encrypted items. In this instance it's an identifier. We also store the date and time you first created the secret and the necessary data to link it within your account.
What if I forget my key?
Ouch! We've all been there. As we've mentioned above, our system can't decrypt these without your key. The only thing we can possibly do is reset your account. This can be performed in your account settings page.
We highly recommend using a secure yet memorable encryption key. Something complicated but also something you can remember easily.
If you've forgotten your key, all we can do is say we've been there too.
Legal compliance
We've never experienced it, but if we ever receive a legal request to turn over your account information we'll have to. Before turning data over though we'd attempt to make contact with you (although sometimes we'll be unable to do so due to a legal order).
Regardless of these requests, we'd still be unable to provide decrypted secrets. You'd have to also provide your decryption key, unless your key was something that had been compromised.
Ready to take the step?
If you own, or work in a business that needs to store sensitive or otherwise secret data, we'd love to invite you onboard.