When we say LegacyOS uses zero-knowledge encryption, we're making a specific and significant claim: we cannot see your data. Not because we choose not to look — but because it is technically impossible for us to do so.
For a platform that stores your will, your property documents, your insurance policies, and your personal messages to your family, this is not a minor technical detail. It is the foundation of why you can trust us with the most sensitive information in your life.
What Is Encryption?
Encryption is the process of scrambling data so that it can only be read by someone who has the right key. When you encrypt a file, it becomes unreadable gibberish to anyone without the corresponding decryption key.
Standard encryption protects your data in transit (while it's moving from your device to a server) and at rest (while it's sitting on a server). This is important — but it means the service provider holds the decryption key. They could, in principle, read your data.
What Makes Zero-Knowledge Different?
In a zero-knowledge architecture, encryption happens on your device, before your data is ever sent to our servers. The key used to encrypt your data is derived from your password — a password that we never see and never store.
This means:
- When your file arrives at our servers, it is already encrypted
- We store an encrypted blob — meaningless without your key
- We do not have your key
- We cannot decrypt your data — not for a court order, not for a data breach, not under any circumstances
What Does 256-Bit AES Mean?
AES stands for Advanced Encryption Standard — the encryption algorithm used by governments and militaries worldwide for classified information. The "256-bit" refers to the key length.
To brute-force a 256-bit AES encrypted file — trying every possible key — would require more computational attempts than there are atoms in the observable universe. It is, for all practical purposes, unbreakable with current or foreseeable technology.
This is the same encryption standard used by your bank, by messaging apps like Signal, and by government agencies for top-secret data. LegacyOS applies it to every file in your vault.
What About Data Breaches?
Data breaches are a real risk for any online service. But with zero-knowledge encryption, a breach of LegacyOS's servers would expose only encrypted data. Without the decryption key — which we don't have — that data is worthless to an attacker. They would see only scrambled, unreadable noise.
"Security that depends on our good intentions isn't real security. Security that makes it mathematically impossible to access your data — that's real security."
The Trade-off You Should Know About
Zero-knowledge encryption has one practical implication: if you lose your password and we cannot reset it through a process that maintains the zero-knowledge model, access to your encrypted data may be permanently lost.
This is why LegacyOS includes secure key recovery mechanisms and strongly recommends sharing vault access with trusted nominees. Your vault exists to serve your family — which means your family needs to be able to access it when they need to.
Security and accessibility are not opposites. A vault that no one can open is not useful. LegacyOS is designed to be both truly secure and truly accessible — to you now, and to your family when it matters most.