2 min read By NT²
Send production keys to my co-founder, not the whole vault
Stories
Your co-founder needs the production key before a weekend deploy. They do not need your personal vault, your old notes, or a zip file of everything.
Stories
Product narratives about structured privacy, local-first vaulting, and encrypted handoffs.
9 min read By NT²
One key per object: envelope encryption inside NT² Vault
Tech
A vault can encrypt everything with one key and still claim that its data is encrypted. We wanted a more useful boundary: each item and attachment gets its own content encryption key, while the vault key protects those keys.
2 min read By NT²
Ten thousand items, still a vault
Stories
The first fifty items are easy. The real test is whether a vault still feels calm after years of credentials, documents, bank records, and notes.
9 min read By NT²
The KDF salt stays on your device
Tech
A salt is not a secret. Still, where it lives changes who can assemble a password-guessing system. NT² keeps the KDF salt and password verifier with the local vault, so unlocking begins and ends on the device.
1 min read By NT²
Work vault, personal vault
Stories
Your laptop holds client API keys, a family insurance policy, and a crypto wallet note. The problem is not storage space. It is boundaries.
10 min read By NT²
How one person builds and operates NT² Vault with AI agents
Tech
The useful question is not whether an AI agent can write code. It is how to give agents enough context and autonomy to move quickly while keeping product decisions, security boundaries, releases, and customer-facing actions under explicit human control.
2 min read By NT²
Three Stripe keys, three environments
Stories
The note says API stuff. Inside are three Stripe keys, two webhook secrets, an old test token, and no one remembers which one is safe to paste.
2 min read By NT²
Embassy appointment, no signal
Stories
You are outside the consulate, the appointment is in twelve minutes, and the confirmation email will not load.
2 min read By NT²
Not another password manager login
Stories
Website logins already have good tools. The harder question is where to keep the secrets that are not just username, password, and URL.
6 min read By NT²
Why host a heavy server when a PWA can do everything locally? Built a zero-server privacy vault.
Tech
In the era of massive cloud-first applications, we often overlook a powerful alternative: the Progressive Web App (PWA). Why maintain a heavy, expensive, and potentially vulnerable server infrastructure when the modern browser is capable of running a full-featured, secure, and high-performance application entirely on the user's device?