UnoLock runs in a secure browser sandbox, preventing access to the OS and minimizing malware risks while ensuring privacy and cross-platform consistency.

CSP ensures the isolation of unauthorized external content, minimizing risks of data injection, preventing malicious scripts, and improving data integrity.

Using SHA-256 and ECDSA, all updates are securely hashed and signed, preventing tampering and unauthorized modifications during PWA update processes.

FIDO2 authentication via WebAuthn ensures secure access to the UnoLock Safe, preventing phishing attacks with strong device-specific login credentials.

MFA with randomized keypads and mouse-based PIN input prevents keylogger attacks, ensuring secure and convenient login processes.

All data is encrypted on the client side with AES-256 GCM before being transmitted, ensuring only you have access to your sensitive information.

Data is securely encrypted and directly uploaded to AWS S3 using pre-signed URLs, bypassing intermediate servers and ensuring end-to-end encryption.

Combining client-side AES-256 encryption with AWS S3 SSE ensures a double-layer security approach, protecting your data at rest and during transit.

Dynamic key generation using a client-side keyring protects your data with unique encryption keys for each data chunk, minimizing risk and exposure.

Data deletion ensures the removal of encryption keys and perfect forward secrecy, making your data irretrievable even after deletion.

Using SHA-256 hashes, uploaded data is verified to ensure integrity and authenticity, protecting against corruption and tampering during transmission.

AWS S3’s inherent redundancy ensures data replication across multiple devices and facilities, safeguarding your data from failures and ensuring high availability.

UnoLock does not use browser local storage or cookies, minimizing data leakage risks, reducing tracking potential, and enhancing privacy.

UnoLock enforces strict privacy policies, collecting no user data and maintaining anonymous payment options. Minimal server logs are purged after three days, ensuring complete privacy for all users.

UnoLock uses AES-256 GCM and ECDHE_ECDSA encryption to secure API communications, ensuring end-to-end encrypted data transfer, preventing eavesdropping or man-in-the-middle attacks.

All metadata associated with your safes is encrypted with client-side authorization, ensuring that only you can decrypt it during a session. The stateless server design ensures no persistent metadata access.

Upon deletion, all encryption keys are wiped, ensuring that safes and file records cannot be recovered. This guarantees permanent data erasure and full compliance with data protection laws.

UnoLock offers a dual-pin system for plausible deniability. One pin grants access to a decoy safe, while another unlocks the real data, protecting sensitive information in high-risk situations.

Multi-key registration and WebAuthn support allow users to register multiple keys per safe, reducing risks from lost keys or lockouts while offering flexibility with passkeys and physical security keys like YubiKeys.

Admin and read-only access options allow for flexible data control. The Timelock feature enables temporary disablement of a key, offering enhanced security in high-risk scenarios.

UnoLock allows users to view files directly within the application with in-memory decryption, ensuring that data never touches the device's persistent storage, protecting against unauthorized access.

Lockout Guard and Legacy Link ensure that in the event of user inactivity, access to safes is maintained through QR codes, safeguarding critical data in emergencies or posthumous scenarios.

UnoLock's serverless architecture reduces attack surfaces and eliminates vulnerabilities associated with traditional server management, enhancing overall platform security and scalability.

Multi-account AWS management with WebAuthn MFA and strict access control ensures that operations are securely handled with minimal privileges, reducing risks of unauthorized access or data breaches.

Stateless build systems and multi-account isolation ensure secure and consistent software development, with multi-person approval required for changes, maintaining code integrity and security.

UnoLock’s DPW enables secure cryptocurrency management by generating private keys in-browser, encrypting them client-side with AES-256 GCM, and allowing secure transaction signing without exposing private keys.