Blog

Notes on privacy, security, and building Velora Vault

Practical guidance on passwords, encryption, and staying ahead of the ways accounts actually get compromised — plus the occasional look at how the vault itself is built.

SecurityJune 2, 2026 · 5 min read

How to choose a master key that actually holds

Length beats complexity. Here's why a four-word passphrase can outlast a twelve-character password with three symbols in it.

Read the post
Guides6 min read

Passkeys vs. passwords: what actually changes when you switch

Passkeys remove the thing phishing depends on — a secret you can be tricked into typing. Here's what that means day to day.

Read the post
Engineering7 min read

Why your master key gets hashed 600,000 times before it touches a database

A single hash is fast — which is exactly the problem. Key stretching trades speed for cost, on purpose.

Read the post
Guides5 min read

Spotting a phishing page before you type your password

The tell is almost never the design. It's the three things a copy can't fake without breaking itself.

Read the post
Security4 min read

The case for a quarterly reused-password audit

One leaked account rarely stays contained to one account. Here's why the audit matters more than the strength score.

Read the post
Security6 min read

What ‘encryption at rest’ does — and doesn't — protect you from

Encrypted storage is real protection against one attacker and no protection at all against a different one. Knowing which is which matters.

Read the post

Ready to put one vault behind everything?

No credit card required to get started.

How security works