Zero-Knowledge Security

The Master Password

In PKey, your data belongs only to you. The Master Password is the single key that can unlock your encrypted vault.

What is it?

The Master Password is the "Root Key" of your vault. When you use PKey, your data is not protected by a simple password.

Your Master Password is run through a memory-hard algorithm (Argon2id) and split via HKDF to generate a military-grade Encryption Key. This means even if someone hacks our servers, they will only see unreadable, mathematically protected data.

Master Password Encryption Process Diagram

Zero-Knowledge Architecture

Simply put: We do not know your password.

  • Your password is never sent to our servers.
  • Encryption and decryption happen entirely in your browser.
  • Even PKey employees cannot access your data.
Locked Vault with No Recovery Key Illustration

Why No "Forgot Password"?

Most websites store your password, which allows them to reset it. We prioritize privacy. A "Forgot Password" option would mean we have access to your key, and we intentionally avoid that so only you control your data.

No Recovery Option

If you forget your Master Password, your vault will be permanently locked. Even we cannot recover it. Store it safely, preferably offline.

Making it Unbreakable

Length Matters

Use at least 16-20 characters for maximum security and resistance against brute-force attacks.(eg. G7@kL9!xP2#vQ8zR)

Mix it Up

Use a combination of uppercase, lowercase, numbers, and symbols to increase complexity.(eg. P@s5W0rd#X9!)

Avoid Patterns

Avoid predictable information like names, birthdays, or common keyboard patterns.(eg. 123456, qwerty, john2005)

Use Passphrases

Use random words to create a passphrase - stronger, more secure, and easier to remember than traditional passwords.(eg. BlueTiger!Runs@Midnight)

Think your password is strong?

Hackers can crack most passwords in seconds.

Test the real strength of your passwords and learn how to build an uncrackable digital vault.

Strength Analysis