Back to overview
Every feature, and the threat it solves
Kistvault makes one promise — zero-knowledge and full recovery — and keeps it with a handful of concrete mechanisms. Pick one to read the definition, the problem it answers, how it works, and the crypto underneath. Claims match the technical specification; no overreach.
RecoveryThe printed Recovery KitA one-time offline code that opens your vault on a clean device — generated on-device, never stored.Read →
UnlockPassword or patternOpen with a password or a 4×4 pattern; both stretched by the same Argon2id derivation.Read →
PortabilityCross-platform, byte-exactOne vault on iOS and Android, verified identical by pinned test vectors.Read →
StorageLocal-only, no cloudThe vault never leaves your device. No backend, no sync — not even encrypted cloud.Read →
Multi-deviceDevice-to-device pairingAdd a second device by a direct, authenticated handshake — no sync service.Read →
BackupExport your containerHold your own encrypted backup — opaque ciphertext that still needs your credential.Read →
IntegritySecure importContainers are treated as untrusted input on the way back in — validated, authenticated, never overwriting.Read →
ArchitectureSecurity architectureAES-256-GCM, Argon2id, HKDF-SHA256, X25519 — in plain words, with honest limits.Read →
The whole point, in one line
Zero-knowledge, so no one else can read your vault. Fully recoverable, so you can't be locked out of it. Kistvault refuses the trade-off.