Deep dive: how your vault stays unreadable (4 min)

This is Alice. Bank, email, photos, work: all behind passwords. Heimlane Vault protects them in a single vault and only Alice holds its key. First, Alice creates her account. She enters her email, then chooses her master password. The golden rule: NEVER forget it. Heimlane doesn't know it, and it can't be reset. If it's forgotten, the vault will stay locked forever. Here is what protects her vault. Her password is used to create a strong, unique key. It takes her an instant, but brute-forcing it would take longer than the age of the universe. That is her vault's level of security. A strong master password makes a strong vault. Her browser also generates a random vault key. The vault key encrypts every item stored in it. Alice's secret key then encrypts the vault key. So what does Heimlane actually store? Her password and her key stay on her device. Her key generates a cryptographic identity fingerprint. The fingerprint and the encrypted key are stored securely. The Heimlane platform encrypts the fingerprint before storing it. Alice's data never leaves her computer without being encrypted. No one can read it. Not even Heimlane. Then Alice imports her passwords. Each item is first encrypted on her device. Then stored, still unreadable. When Alice needs to sign in to a website. The Heimlane extension makes it easy for her. She types her master password to unlock the extension right from her browser. One click, and the fields fill in automatically. Same for the two-factor code. Alice is signed in, and she only had one password to remember. Of course, Alice also wants her passwords… …on her smartphone. On the phone, her password recreates her key. Same password, same key: her fingerprint matches. The encrypted vault key is sent to her phone. And her phone can then decrypt it. Her items are available, decrypted on her phone. Her key opens her vault… …in her browser… …and on her phone. Her data stays unreadable, To everyone but her.