Sep 9, 2026 · 7 min read
"Trust us" is not a security model. It is a hope. And hope is a poor thing to build a family's legacy on.
Most services encrypt your data at rest, then keep the key right next to it. That protects you from a stolen hard drive, and from nothing else. The provider can read everything — which means anyone who compels the provider, or compromises the provider, can read it too.
Zero-knowledge is different: encryption happens on your device, with a key that never leaves your hands. The server stores only ciphertext. We cannot read your vault, because we never had the key to read it.
Zero-knowledge is a promise you can verify, not a claim you have to believe. It is the difference between a bank that holds your money and a safe that holds your key.
For a heirloom-grade vault, there is no other way to build it.