- AES-256-GCM AES-256-GCM scrambles data and also proves nobody changed it. What it is, what it does not do, and exactly how Stillroom Vault uses it.
- Argon2id Argon2id turns a password into a key slowly and with lots of memory, so every guess costs an attacker. How it works, and how Stillroom Vault uses it.
- Shamir secret sharing How Shamir secret sharing splits a secret into pieces so any agreed number can rebuild it and fewer reveal nothing, and how Stillroom Vault uses it.
- Secure Enclave What Apple's Secure Enclave is, what it protects and what it doesn't, and how Stillroom Vault uses it for Touch ID and Lock to this Mac.
- Plausible deniability What plausible deniability means for encrypted data, where it breaks down, and exactly what Stillroom Vault’s decoy password does and doesn’t do.