Zero-Knowledge Security

Last Updated: January 30, 2026

What is Zero-Knowledge?#

Zero-Knowledge is our most secure way to protect your account. Here's what makes it special:

Your password NEVER leaves your computer.

When you log in to most websites, your password travels over the internet to the server. Even though it's encrypted during travel, the server still sees your password.

With Zero-Knowledge, your password stays on YOUR device. Instead, we use smart math to prove you know the password without ever sending it.

Think of it like this:

• Regular login: You show your ID card to get into a building
• Zero-Knowledge login: You prove you know a secret handshake, but never reveal what it is

Why Should I Use It?#

How Does It Work?#

When you create an account or enable Zero-Knowledge:

1. You create a password on your device
2. Your device creates a secret key from your password (using special math)
3. Only a "proof" is sent to us - not your password
4. We store the proof - we can verify you, but never see your password

It's like having a lock where you keep the only key, and we just check if your key works.

Your 24-Word Recovery Phrase#

When you enable Zero-Knowledge, you receive 24 special words. These words are VERY important!

What are these words?#

Your 24 words are like a master key to your account. If you ever:

• Forget your password
• Lose access to your device
• Need to log in on a new computer

You can use these words to get back into your account.

Keep Them Safe!#

DO:

• Write them down on paper
• Store the paper somewhere safe (like a locked drawer)
• Consider making a backup copy in a different safe place

DO NOT:

• Take a photo of them
• Save them on your computer
• Send them by email or text
• Share them with anyone

Why 24 Words?#

We use words instead of random letters because:

• Words are easier to write down correctly
• Words are easier to read and verify
• 24 words provide extremely strong security

Setting Up Zero-Knowledge#

For New Accounts#

1. Go to anonym.legal/auth/signup
2. Enter your email and create a strong password
3. Complete the signup process
4. Save your 24-word recovery phrase immediately!

For Existing Accounts#

If you already have an account, you may already be using Zero-Knowledge (it's the default for new accounts). Check your settings to see your security status.

Logging In with Zero-Knowledge#

Logging in works the same as always - just enter your email and password. The Zero-Knowledge magic happens automatically in the background!

You won't notice any difference, but your password never leaves your device.

Recovering Your Account#

If you forget your password and have your 24-word recovery phrase:

1. Go to the login page
2. Click "Forgot password?"
3. Choose "Recover with phrase"
4. Enter your 24 words in order
5. Create a new password
6. You're back in!

What If I Lost My Recovery Phrase?#

This is serious. Without your recovery phrase:

• We CANNOT help you get back into your account
• This is by design - Zero-Knowledge means we don't have access to your password or keys
• You would need to create a new account

This is why saving your 24 words is so important!

Desktop App and Office Add-in#

Zero-Knowledge works across all anonym.legal platforms:

Your password is protected everywhere you use anonym.legal.

Common Questions#

Can anonym.legal staff see my password?#

No. That's the whole point of Zero-Knowledge! Your password is processed on your device. We only receive a mathematical proof, never the actual password.

What if anonym.legal gets hacked?#

Your password is still safe! Hackers would only find mathematical proofs, not passwords. Without your actual password, they cannot access your account.

Is Zero-Knowledge harder to use?#

No! You won't notice any difference when logging in. The only extra step is saving your 24-word recovery phrase when you first set up your account.

Can I turn off Zero-Knowledge?#

Zero-Knowledge is enabled by default for your protection. We recommend keeping it on for the best security.

What happens if I change my password?#

When you change your password:

1. Your device creates new secret keys
2. You receive a new 24-word recovery phrase
3. Your old recovery phrase stops working
4. Save your new phrase immediately!

Technical Details (For the Curious)#

If you want to know more about how Zero-Knowledge works:

• Key derivation: We use Argon2id, a memory-hard algorithm that makes password guessing extremely slow
• Encryption: XChaCha20-Poly1305, the same encryption used by security experts worldwide
• No password storage: We never store your password in any form
• Constant-time verification: Our security checks take the same time regardless of input, preventing timing attacks

For the full technical audit, see our Zero-Knowledge Audit Report.

Summary#

Zero-Knowledge gives you the best protection available. Your password stays yours - always.

More Help#

• Two-Factor Authentication - Add another layer of security
• FAQ - Common questions answered
• User Guide - Complete guide to using anonym.legal

Last Updated: January 30, 2026