Your account password
Lets you sign in and reach the binders you are allowed to access. Multi-factor authentication adds another check at this door.
“Is this the right person?”How security works
at Lusarca
Your binder holds personal details meant for people you trust. We use separate protections for your account and for the information inside your binder.
Two passwords. Two different jobs.
Think of your account as the front door and your binder as a locked safe inside. Opening the front door does not open the safe.
Your binder password
Unlocks the contents of a particular binder in your browser. It is not sent to Lusarca’s servers.
“Can this person unlock the information?”Many sites use one password because their service can read the information it stores for you. Lusarca adds a separate binder password so that signing in alone does not reveal your saved binder contents. Use different passwords for these two jobs.
Your browser locks it before we store it.
Encryption turns readable information into scrambled data that needs the correct key to be read. Your browser creates that key from your binder password.
You enter information
Readable in your unlocked browser.
Your browser encrypts it
The binder is locked before saving.
Lusarca stores the locked copy
Stored content is unreadable without the key.
Our servers do not receive your binder password or unlocked key. We cannot read the encrypted binder contents from the saved copy alone. Uploaded files are also encrypted before storage. When you unlock a binder, your browser makes its contents readable again.
What can Lusarca still see?
Information needed to run the service, such as your account profile, binder names and labels, save times, file sizes, invited contact emails, and sharing permissions. Invitation messages are also processed for email delivery. These details are separate from your encrypted binder contents.
MFA adds a check beyond your password.
Multi-factor authentication (MFA) asks for another proof when you sign in, such as a one-time code. If someone steals your account password, they still need to pass this extra check. Protect the email account or authenticator used for that check, too.
MFA protects account access. Your binder password protects the contents. Neither replaces the other.
A few important things to remember
Keep your binder password safe.
Account password recovery does not unlock your binder. Binder-password recovery is not available in this version, and support cannot recover that password for you. Keep a safe record that your intended contacts can access when appropriate.
Share deliberately.
An invited contact needs a verified account, your permission, and the binder password you give them directly. Review their permitted copy before sharing. Invitation emails are separate from the encrypted binder—never include its password in them.
Protect your device and downloads.
Information is readable while your binder is unlocked. Lock it when finished. Downloaded documents and emailed messages do not have the binder’s password protection; previously downloaded copies cannot be recalled.
A little more detail about the protection
The app uses AES-256-GCM encryption. It derives a key from your binder password using PBKDF2-SHA-256 with a random salt and 600,000 rounds. The unlocked key stays in this tab’s memory, not browser storage. Save & lock, sign-out, reloading or closing the tab, or 30 minutes of inactivity clears the key.
No system removes every risk. A compromised device or browser, or malicious changes to the application delivered to it, could expose information while it is unlocked. This alpha is not an independently security-audited production service; continue using sample information.