Bulletproof authentication
Vaultr layers authentication with a depth rarely seen in a consumer app — and runs on infrastructure engineered to survive.
Every layer locked
The full WebAuthn spec — registration challenges, attestation, assertion verification, and counter tracking to stop replay. Unphishable, unforgeable, no password to steal.
A 128-dimension descriptor is computed on your device with liveness detection. Vaultr stores only a SHA-256 hash of it — not your face, not your photo, not even the descriptor.
SendGrid email + Twilio SMS. Six digits, timing-safe comparison, max 5 attempts, with progressive cooldowns that escalate from 60 seconds to an hour under abuse.
A 6-digit PIN gates hidden profiles, stored only as a hash, with configurable auto-lock from one minute to never.
The architecture of trust
Circuit breaker trips on repeated failure and auto-recovers; the orchestrator’s 42 workflows each roll back cleanly if any step fails.
FAQ
WebAuthn/FIDO2 passkeys (hardware security keys, Windows Hello, Face ID), on-device face authentication with liveness detection, email and SMS one-time codes, and a PIN for hidden profiles. Wallet transactions add a separate, independent 2FA layer on top.
No. Face descriptors are computed on your device; Vaultr stores only a SHA-256 hash. The raw image never leaves your phone, and the hash can verify you without exposing anything about your face.
Vaultr is a distributed system of independently deployed microservices, each owning its own database and auth layer. An API gateway adds per-service circuit breakers and request tracing; a saga orchestrator runs 42 multi-step workflows with automatic rollback; Redis distributed locks and idempotency keys prevent duplicate or partial operations.
Yes — every login, failed attempt, password change, new device, passkey registration, face enrollment, and session is written to an immutable audit log.
Your vault. Your keys. Your messages. Your money. Your identity. Your rules. Get it on every platform — and if they’ve blocked the stores where you live, install the PWA and walk right in.