Step 01
Your device is the vault.
Unlike others that only encrypt the password, Zero Lock encrypts your entire record locally including usernames and URLs. Your data never leaves your device in a readable format.
Local-only encryption
Zero server-side exposure
Mathematical certainty
Step 02
The Unbreakable Scramble.
We use WebAssembly Argon2id the global standard to derive a local AES-256 key. By requiring massive amounts of RAM for every password guess, your vault is mathematically immune to GPU brute-force attacks.
AES-256-GCM Standard
64MB Memory-Hard Argon2id
Secure Random 32-Byte Salts
Step 03
The Blind Messenger.
When you sync across devices, we move your encrypted 'puzzle'. We never have the key, so even we can't see what's inside. We are just the messenger.
Zero-Knowledge architecture
End-to-end encrypted sync
Full Metadata Encryption
Step 04
Zero-Knowledge Escrow.
If you forget your password, your vault isn't lost forever. We generate an offline ZLCK Emergency Recovery Key that encrypts your master blob. The server holds the blob, but only your physical ZLCK key can decrypt it.
No Permanent Lockouts
Master Key Rotation
Total Offline Recovery