Archive
Latest stories →Every story in release order. Start with the oldest post, then use Next story at the bottom of each article to read forward.
- Nearby control plane, WebRTC bulk plane
- Bootstrap QR stays off the web
- A proximity session is not a peer connection
- Share file, deep link, and machine-handoff passphrase
- Delayed legacy release is not password recovery
- Revoke what you already sent
- A peer connection is not a phone contact
- Four surfaces, one field set
- Four personas, four moments from nt2.me
- Searchable metadata, sealed field values
- New Ledger, same old Notes mistake
- Compose domains from one type system
- A vault that never needed a US cloud account
- Semantic columns, not form widgets
- Consulate with no signal—where is your passport?
- The rent screenshot in the LINE group
- Slots, not a blank page
- When your landlord asks for ID on LINE
- Search ten thousand titles without lag
- Replica batch under the hood — packet shapes
- Prove address, hide account number
- Threat model, 2026: browsers and extensions
- When trust should end
- Benchmarks from a 10k-item OPFS vault
- Three ways to share, three kinds of trust
- Offline-capable is not sync later if lucky
- Verified trust is cryptographic, not a button
- XSS steals sessions elsewhere; here keys are non-extractable
- One-way invite, mutual trust
- Shared crypto packages get a 100% coverage floor
- Secure contacts are trust relationships, not a phone address book
- Security veto is a role, not a vibe
- Identity, assets, trust, and sharing — one story, not three features
- Specs before agents write code
- Recovery kit or backup file?
- What the Workers are allowed to see
- An encrypted link is not an email attachment
- .nt2backup as a sovereignty format
- The Receive hub is not a downloads folder
- Same vault UI in browser, PWA, and desktop shells
- Joint finances without a shared phone
- Vault profile is section KV, not one mega-row
- Birth certificate and insurance
- Schema v60 and incremental migration
- Tax season: the accountant asks for documents
- Wrong password must fail closed
- Moving abroad means a new admin stack
- CBF is how structured fields leave RAM
- Hardware wallet setup day
- Auto-lock is a memory hygiene problem
- E2E chat is not a vault
- SQLite in a Web Worker is not optional
- Already local-first, missing structure
- Selective SSI — not a general DIDComm wallet
- 1Password holds logins; where do mnemonics go?
- Relay indexes ciphertext; Inbox stays local
- I outgrew Apple Notes
- Share passphrase ≠ master password
- Your data, your jurisdiction
- Challenge–response, not bearer email
- Escape hatch, not lock-in
- One unlocked vault per tab — by design
- No analytics on the marketing site
- Metadata in SQLite, ciphertext in BlobStore
- Structured security under three dollars
- FTS5 for titles; table scan when filters win
- Offline by default is not offline-only
- Never load the whole vault into Svelte state
- Look at my screen, not my vault
- The account database must not become a password oracle
- Timed reveal on a video call
- One sync hub for one vault identity
- Sent to me means ciphertext to you
- No password reset, by design
- Something arrived in my Inbox
- Blind replica sync on the edge
- Sometimes a USB stick beats email
- Why our vault SQLite database lives in OPFS, not IndexedDB
- One-time disclosure for your lawyer or accountant
- Unlocking a local vault is not logging in to the cloud
- Send production keys to my co-founder, not the whole vault
- One key per object: envelope encryption inside NT² Vault
- Ten thousand items, still a vault
- The KDF salt stays on your device
- Work vault, personal vault
- How one person builds and operates NT² Vault with AI agents
- Three Stripe keys, three environments
- Embassy appointment, no signal
- Not another password manager login
- Why host a heavy server when a PWA can do everything locally? Built a zero-server privacy vault.
- Mom keeps passwords in a paper notebook
- The spreadsheet on my Desktop
- Threshold Vault and Key DID: identity without handing over the keys
- Recent updates — late June 2026
- You pasted the API key in Slack
- When your landlord asks for ID on WhatsApp
- They only needed the last four digits
- Your seed phrase shouldn't live in Apple Notes
- Split rent without screenshotting banking apps
- Null Trust² — what the name means
- Welcome to the NT² Blog