Security
Audit logs you can verify: how hash chains work
An audit log is only evidence if nobody can quietly edit it. How hash chains make tampering visible, what they miss, and how to check an export yourself.
Security
What on-device encryption protects and what it does not: what the server stores, per-environment keys, verifiable audit logs and account recovery.
Latest posts
Security
One key per environment: why dev must not open prod
Most tools separate dev and prod with permissions the server enforces. Why the boundary is stronger when each environment has its own encryption key.
Security
What “the server can’t read it” actually means
A blind server is a precise claim with precise limits. What Crunu's server stores, what it cannot do even if compromised, and what it still sees.
Example. Kiteline is a fictional company.
More posts
Security
7 min readWhy a vault vendor can’t reset your password
With a password and a Secret Key, nobody at the vendor can open your account, or reset it. How the Emergency Kit works, and what to do when something is lost.