Sign in with your fingerprint, face, or security key — never a password

Every recipient unlocks their files with a WebAuthn passkey — a fingerprint, face scan, or hardware security key tied to their own device. There's no password to steal, reuse, or phish, and no shared secret for an attacker to intercept. Once someone registers their passkey, it's locked to their device alone; stealing their email password afterward gets an attacker into their inbox, not into their files.