ZERO-KNOWLEDGE
The server is not trusted with the secret
A master password is used on your device and never sent anywhere. What we hold is sealed with AES-256, and the seal is made and broken only where you are. We cannot read your connections, we cannot reset your master password, and we cannot hand either to anybody who asks us for them — which is the point, and also the reason to write the password down somewhere safe.
BUILT, NOT BORROWED
The parts that matter are ours to fix
The remote desktop inside the application is our own work rather than something licensed and wrapped. That costs us time we would rather have spent elsewhere, and it buys the only thing that matters when a session breaks on your machine on a Tuesday: we can go and fix it, in days, instead of filing a report with somebody who has other priorities.
SIGNED, EVERY PLATFORM
A build nobody can vouch for is not a release
Every download is signed by us and verified by the system it lands on — notarised for macOS, published through repositories we sign ourselves for Linux, and through the store’s own signing on Android. The checksum of each file is published beside it, so you can confirm that what you downloaded is what we built.
FOUR LANGUAGES, NO EXCEPTIONS
A string that exists in one language does not ship
The application speaks English, Russian, Ukrainian and Georgian. A new piece of user-facing text lands in all four in the same change, because the alternative — a backlog of untranslated strings, shown to whoever happens to be reading — is how a product quietly becomes English-only. We hold this page to the same standard by keeping it in one language rather than four bad ones.