







Passkeys are the future of authentication, but using them for data encryption is a disaster waiting to happen. Overloading these credentials creates a dangerous blast radius that can lead to the irreversible loss of a user's most sacred memories and documents.
I don't like passkeys | Ethan Hawksley
Why passkeys are a step back for personal security: examining account lockout risks, platform lock-in, hardware key limits, and fragile recovery flows.

Ente Locker
Store your important documents and credentials. Share them with trusted contacts or pass them on in emergencies.

Encrypted Spaces — Research preview
An architecture for collaborative applications where data is encrypted and operations are cryptographically verifiable.

Cryptomator - Free & Open-Source Cloud Storage Encryption
Cryptomator is an open-source encryption tool for secure cloud storage. Protect your privacy for free on Dropbox, Google Drive, OneDrive, and more.

CryptPad: end-to-end encrypted collaboration suite
CryptPad: end-to-end encrypted collaboration suite

CryptPad: end-to-end encrypted collaboration suite
CryptPad: end-to-end encrypted collaboration suite

Ente Paste
Share sensitive text with one-time, end-to-end encrypted links that auto-expire after 24 hours.

Architecture
Overview of Ente's end-to-end encrypted architecture—learn how your data is encrypted on-device, securely shared, and safely stored using cryptography.

Permissioned Data Diary 1: To Encrypt or Not to Encrypt - Daniel's Leaflets
The first in a series of posts about major design decisions along the way to a permissioned data protocol for atproto.
New authentication flow for Sill - Euphonos
Sill no longer requires an email for signup
Introducing Keytrace — Keytrace Blog
Keytrace lets you cryptographically link your atproto/Bluesky account to external accounts across the web.
timelocked secrets
Encrypt messages that can only be decrypted after a specific time. Powered by drand timelock encryption and stored on your atproto PDS.
Profile on Keytrace
Keytrace takes ideas from Keybase and Keyoxide and brings them to the decentralized web.
FOKS - Federated Open Key Service
FOKS provides a secure, end-to-end encrypted Git hosting service. Your data is encrypted on your machine before it hits the server, and the server never sees data or filenames in unencrypted form. FOKS uses PQ-secure public-key cryptography, securing all end-to-end encrypted data against future quantum attacks. Your secrets are safe, even in the event of server compromise.
Send
Encrypt and send files with a link that automatically expires to ensure your important documents don’t stay online forever.

Keytrace — One identity, many proofs.
Link your GitHub, domain, and other accounts to your internet handle. Cryptographically signed, user-owned, and portable.