Personal
Personal database contents are protected with AES-256-GCM. A PIN restricts access in the app. Protect your operating system account and backups too.
LOSTPASS / Security
Security with clear boundaries
Protection starts with an understandable model and access control.
Transfer
Share the code only with the intended recipient. In the updated version, compare the verification code on both devices before sending and receiving. Older versions may not support this check.
Commerce
Server encryption does not mean zero knowledge: the server and its administrator are part of the trust boundary. Use HTTPS, restricted roles and verified backups.
Report an issue
Include the version, reproduction steps and impact. Do not attach real passwords, keys or your personal database.
The team’s contact details will be published here.