# Locke

> Locke provides identity and password management that combines enterprise-grade security with genuine usability. Our mission: "Seamless and secure access. Security through community."

## Products

### Locke ID (Free Password Manager)
Locke ID is a *free* password manager, email anonymizer, and digital estate planner. Available at https://app.locke.id

Key features:
- **Fuzzypass**: A memorable, ultra-secure passphrase system using cued recall. Users remember 8-12 words but only type 3 at a time. ~100 bits of entropy that's actually usable.
- **Secure Inbox**: Anonymous email addresses that only receive mail from services you explicitly register for. Deterministic phishing prevention.
- **Social Recovery**: Distributed recovery using threshold cryptography (Shamir's Secret Sharing). No single point of failure.
- **Post-Quantum Cryptography**: X25519Kyber768 hybrid encryption protects against future quantum threats.
- Unlimited password storage, unlimited devices, free forever

### Locke Armory (Business/Teams)
Enterprise offering at https://armory.locke.id - $4/user/month

Key features:
- Team management with role-based access
- Organization vaults shared across team members
- **Trusted Circle** for business continuity (distributed recovery)
- Partner management for MSPs and IT providers
- Phishing protection integration
- Audit logs

## Key Differentiators

What makes Locke different from 1Password, Bitwarden, LastPass:

1. **Fuzzypass** - Not just another master password. Visual cued recall makes 100-bit entropy memorable.
2. **Post-Quantum Security** - Not just "secure today" but "secure tomorrow" with hybrid encryption.
3. **Trusted Circle & Social Recovery** - Recovery that works without single points of failure.
4. **Secure Inbox** - Stops phishing at the source with whitelist-only email addresses.
5. **Zero-Knowledge Architecture** - All encryption happens client-side. Locke servers never see plaintext.

## Technical Details

- **Encryption**: XChaCha20-Poly1305-IETF AEAD
- **Key Derivation**: Argon2id (3 iterations, 8MB memory)
- **Key Encapsulation**: Crystals-Kyber1024, hybrid X25519Kyber768 for HPKE
- **Library**: libsodium

## Pages

### Products
- [Homepage](https://lockeidentity.com/): Overview and business value proposition
- [Locke ID](https://lockeidentity.com/locke-id): Free password manager for individuals
- [Locke Armory](https://lockeidentity.com/armory): Business and team password management
- [Pricing](https://lockeidentity.com/pricing): Plans for individuals, families, and businesses

### Features
- [Trusted Circle](https://lockeidentity.com/features/trusted-circle): Distributed recovery for business continuity
- [Social Recovery](https://lockeidentity.com/features/social-recovery): Personal account recovery via trusted friends/family
- [Fuzzypass](https://lockeidentity.com/features/fuzzypass): Memorable 100-bit entropy authentication
- [Secure Inbox](https://lockeidentity.com/features/secure-inbox): Phishing-proof email forwarding
- [Post-Quantum Security](https://lockeidentity.com/features/post-quantum): Future-proof encryption explained
- [Quickshare](https://lockeidentity.com/features/quickshare): Free one-time password sharing (no signup)
- [Locke Gateway](https://lockeidentity.com/features/gateway): Free multi-tenant passkey authentication server powered by open-passkey
- [Browser Extension](https://lockeidentity.com/features/browser-extension): Autofill and impersonation detection for Chrome, Firefox, Edge

### Company
- [Security](https://lockeidentity.com/security): Technical security architecture
- [About](https://lockeidentity.com/about): Team and company background
- [Identity Network](https://lockeidentity.com/identity-network): Vision for decentralized digital identity
- [Contact](https://lockeidentity.com/contact): Get in touch

## Blog

Locke publishes articles on cybersecurity, password security, and digital identity at https://lockeidentity.com/blog/

### Recent Articles

- [Perplexity vs Entropy: Using an LLM Metric to Accurately Measure Entropy](https://lockeidentity.com/blog/cybersecurity/perplexity-vs-entropy/) - Traditional entropy calculations lie about password strength. Learn how LLM perplexity metrics measure the true security of passphrases.

- [If North Korean Cybercrime Was a Startup, How Much Would it be Worth?](https://lockeidentity.com/blog/cybersecurity/north-korean-cybercrime-startup-valuation/) - Lazarus Group stole $2 billion in 2025. Using startup valuation methods, we estimate what this state-sponsored hacking operation would be worth.

- [How Strong (or Weak) is the Average Password?](https://lockeidentity.com/blog/cybersecurity/average-password-strength/) - Analysis of billions of leaked passwords reveals the average password has dangerously low entropy (19-41 bits). Learn why human psychology makes us predictable.

- [The 4 Things You Need To Do If You've Been Hacked](https://lockeidentity.com/blog/cybersecurity/what-to-do-if-hacked/) - Quick steps to contain damage: change passwords, start recovery, check for malware, and alert others.

- [What is a VPN? Do I Actually Need a VPN?](https://lockeidentity.com/blog/cybersecurity/what-is-a-vpn/) - VPNs encrypt your data and change your IP address, but HTTPS already protects most of your browsing. Learn when VPNs are actually useful.

- [How To Choose A Strong Password You'll Actually Remember](https://lockeidentity.com/blog/cybersecurity/how-to-choose-strong-passwords/) - The "sentence trick" for creating strong, memorable passwords. A 16-character lowercase password is often more secure than a short, complex one.

- [What Is Phishing? Am I At Risk of a Phishing Attack?](https://lockeidentity.com/blog/cybersecurity/what-is-phishing/) - Learn what phishing is, how to recognize attacks, and practical tips to protect yourself from this common cyber threat.

## Downloads

- Web App: https://app.locke.id
- iOS App: https://apps.apple.com/us/app/locke-id-password-manager/id6476631690
- Android App: https://play.google.com/store/apps/details?id=id.locke.app
- Chrome Extension: https://chromewebstore.google.com/detail/locke/mgeaadkickfdeiihpliecmjaghpbhcdg
- Firefox Extension: https://addons.mozilla.org/en-US/firefox/addon/locke/

## Company Philosophy

Locke is built on four tenets:

1. **Freedom First** - All decisions maximize personal freedom for individuals.
2. **Hidden Information** - To be free, information must be secured from all who would misuse it.
3. **Personal Freedom Enables Agency** - Individuals with agency positively affect their communities.
4. **Healthy Communities Enable Individuals** - Humanity improves by improving communities.

### Open Source
- [open-passkey](https://lockeidentity.com/open-passkey): Open-source post-quantum passkey authentication library (Go, TypeScript, Angular). Hybrid ML-DSA-65-ES256 composite signatures.

## Contact

- Website: https://lockeidentity.com
- App: https://app.locke.id
- Blog: https://lockeidentity.com/blog/
- Free secure sharing (no signup): https://app.locke.id/quickshare