Files only you can open — sealed with your passkey, kept in your own storage.
Test rig — vault stored locally under RP ID …. Don't put real data in it yet.
Locked with your passkey. Kept in your own storage, where even the host sees nothing but noise.
Your passkey is registered. One more tap derives and wraps your master key — the browser needs a fresh tap for this second step.
Type these words from the phrase you just saved — this is checked, not a tick-box.
Unlock to reach your files. The master key stays in memory only.
Enter your 12 words to unlock — or import a vault.json from another device first.
Confirm your 12 words still open this vault — a real unlock, any time.