Zero-knowledge encryption means your data is encrypted on your device before it reaches our servers. We never have access to your encryption keys, so even our engineers cannot decrypt your identity information, passwords, or personal data. Only you can unlock your data with your password.

If you forget your password, you can restore access using your 24-word recovery phrase. This is why we strongly recommend saving your recovery phrase in a secure location when you first create your account. Without your password or recovery phrase, we cannot recover your account. This is by design to protect your privacy.

Before you enter your full password, we show you a unique security identity (phrase and avatar) that only the real WIGGWIGG can display. Phishing sites cannot fake this without access to our servers. If you don't see your security identity, don't enter your password. You're likely on a fake site.

No. Your identity data (names, addresses, passwords, notes) is encrypted on your device before upload. Even if our engineers wanted to, they cannot decrypt your information. We use zero-knowledge architecture specifically so we cannot access your data. Not even with legal requests.

Application security covers your identity data (names, passwords, personal details), all protected with zero-knowledge encryption. Communications security covers phone calls and SMS/MMS messages, which are subject to legal requirements for safety checks. Your identity data remains fully encrypted; only communications are scanned in real-time as required by law.

Our encryption happens in your browser using industry-standard Web Crypto APIs. You can verify this by inspecting the network traffic, all data sent to our servers is encrypted ciphertext. We also use AES-256-GCM encryption with client-side key derivation, which are industry-standard encryption protocols used by banks and governments.

Even if someone breaches our servers, your data remains protected. All they would find is encrypted ciphertext that cannot be decrypted without your password. We never store your password or encryption keys on our servers. They only exist on your device. This is the core principle of zero-knowledge architecture.

Yes. You have full control over your data. You can export your identities, passwords, and personal information at any time from your account settings. The exported data is encrypted and can only be decrypted with your password, ensuring your data remains secure even during export.