Frequently Asked Questions

Sekura generates a secure BIP39 cryptographic wallet to derive unique encryption keys for your files. Your data is then protected using industry-standard AES-256-GCM encryption, ensuring robust security.

No. Sekura operates on a zero-knowledge architecture. We do not store your passwords or recovery phrases. If you lose both your password and your BIP39 mnemonic recovery phrase, your data cannot be recovered by anyone, including us.

Currently, Sekura is optimized for safeguarding sensitive text-based documents and does not encrypt media files like images or videos. Our focus is on protecting critical personal and financial records.

The application generally operates offline to ensure your privacy. Internet access is only required for initial license activation, payment processing, and validating license status during the 30-day money-back guarantee period.

Sekura LLC is proudly based in San Jose, California, in the heart of Silicon Valley.

Sekura FileLock is available for macOS (12.0 or later, Apple Silicon) and Windows (10 or later, 64-bit). We provide native applications optimized for each platform.

The core encryption algorithms we use (AES-256-GCM, Argon2, BIP39) are open standards that have been publicly audited. While the application itself is proprietary, our security architecture is transparent and based on well-established cryptographic principles.

Full disk encryption (like FileVault or BitLocker) protects your data when your device is powered off. Sekura FileLock provides file-level encryption that protects individual files even when you're logged in and working. Both layers complement each other for comprehensive security.

AES-256-GCM is an encryption standard that uses a 256-bit key with Galois/Counter Mode. It provides both confidentiality (your data is unreadable without the key) and authenticity (verification that data hasn't been tampered with). It's the same encryption standard used by governments and financial institutions worldwide.

Argon2 is a password hashing function that won the Password Hashing Competition in 2015. It's designed to be memory-hard, meaning it requires significant RAM to compute, making it highly resistant to attacks using GPUs or specialized hardware. This makes brute-force password attacks extremely difficult.

When you create your vault, Sekura generates a BIP39 mnemonic phrase (24 words) that serves as the seed for your cryptographic keys. Your password is then used with Argon2 to derive a master key, and individual file keys are derived from this master key using HKDF.

No. Without your password (or BIP39 recovery phrase), your files cannot be decrypted by anyone, including Sekura. This is by design - your encryption keys never leave your device and are never stored anywhere we can access.

Sekura encrypts files in-place using atomic operations. This means the original file is securely overwritten with the encrypted version in a way that prevents data loss even if the process is interrupted. The original unencrypted content is permanently removed.

AES-256 is considered quantum-resistant when used with 256-bit keys. While quantum computers may eventually weaken some cryptographic algorithms, AES-256 would require a quantum computer with about 6,000 logical qubits to break, which is far beyond current technology.

Encryption is reversible - encrypted data can be decrypted with the correct key. Hashing is one-way - you cannot recover the original data from a hash. Sekura uses encryption (AES-256-GCM) to protect your files and hashing (Argon2) to protect your password.

Full disk encryption (like FileVault or BitLocker) encrypts your entire drive but decrypts everything when you log in. File-level encryption protects individual files that remain encrypted even when you're logged in. Both work together for comprehensive security.

Yes. Encrypted files can be copied, moved, and backed up like any other files. They remain encrypted and secure wherever they're stored. You can back them up to external drives, cloud storage, or any other backup solution.

Blake2b is a cryptographic hash function used for verifying data integrity. Sekura uses Blake2b to ensure that encrypted files haven't been corrupted or tampered with. If a file fails integrity verification, it indicates potential data corruption.

Write your 24-word recovery phrase on paper and store it in a secure location like a safe or safety deposit box. Never store it digitally (no photos, no cloud storage, no password managers). Consider making multiple copies stored in different secure locations.

Use a password that is at least 12 characters long with a mix of uppercase, lowercase, numbers, and symbols. Better yet, use a passphrase of 4-6 random words. Avoid personal information like birthdays or names. Consider using a password manager to generate and store complex passwords.

Yes, we strongly recommend enabling 2FA for additional security. Even if someone obtains your password, they won't be able to access your vault without the second factor. You can enable 2FA in Settings → Two Factor Authentication.

Unlike online accounts, frequent password changes aren't necessary for file encryption if you're using a strong password. However, you should change your password if you suspect it has been compromised or if you've shared it with someone who no longer needs access.

We recommend using Sekura only on computers you control. On shared computers, ensure you always lock your vault when stepping away and log out completely when done. Be aware that keyloggers or screen recording software could potentially capture your password.

Immediately change your password through Settings → Change Password. If you believe your recovery phrase was also compromised, you should create a new vault with a new recovery phrase and transfer your files. Contact [email protected] if you need assistance.

While your vault is locked, encrypted files cannot be read by malware. However, when you unlock your vault, files are decrypted for your use and could potentially be accessed by malware on your system. Keep your operating system and antivirus software up to date.

Yes. Files encrypted by Sekura remain encrypted wherever they're stored, including cloud sync folders. The cloud service will only see encrypted data they cannot read. This provides an additional layer of protection for cloud-stored files.

You can enable Two-Factor Authentication (2FA) for added security by navigating to Settings → Two Factor Authentication within the application.

The core Vault functionality operates with no external dependencies. However, the 'Find' feature utilizes Apache Tika Server, which requires Java 11 or later to be installed on your operating system.

No. The Find feature is completely optional and is designed to help you discover sensitive information. It scans the contents of folders you explicitly allow via Settings for sensitive data patterns. To protect any files discovered by the scan, you must manually move them to the Vault.

You can change your password at any time by navigating to Settings → Change Password.

If you forget your password, you can trigger the recovery process using your BIP39 mnemonic phrase. Simply click the 'Forgot Password' link on the login screen to begin.

The scanner uses Apache Tika, which supports over 1,000 file formats including PDF, Microsoft Office documents (DOCX, XLSX, PPTX), OpenDocument formats, plain text, RTF, and more. See the Apache Tika documentation for a complete list.

Each license is valid for a single device. If you need to use Sekura FileLock on multiple devices, you'll need to purchase additional licenses. Contact [email protected] for volume licensing options.

To transfer your license, first deactivate it on your current device through Settings → License → Deactivate. Then install Sekura FileLock on your new device and activate using the same license key.

The Find feature requires Java 11 or later to be installed. Ensure Java is installed and accessible from your system PATH. Also verify that you've added the folders you want to scan in Settings → Allowed Folders. The scanner only searches in explicitly allowed locations for privacy reasons.

Click 'Forgot Password' on the login screen and enter your 24-word BIP39 recovery phrase. This will allow you to set a new password while maintaining access to all your encrypted files.

Encryption speed depends on your hardware. Argon2 key derivation is intentionally slow for security. For large files, the process may take longer. Ensure no other intensive processes are running. SSDs provide faster encryption than traditional hard drives.

File corruption can occur due to storage device errors, incomplete file transfers, or interrupted operations. If you have a backup of the encrypted file, try restoring it. Unfortunately, corrupted encrypted files cannot be recovered without a valid backup.

Try restarting your computer first. If the problem persists, check that you meet the system requirements (macOS 12+ or Windows 10+). On macOS, you may need to allow the app in System Preferences → Security & Privacy. Contact [email protected] with your error details.

Copy your encrypted vault folder to the new computer, install Sekura FileLock, and transfer your license. You'll need your password (or recovery phrase) to access files on the new machine. Remember to deactivate your license on the old computer first.

Some antivirus software may flag encryption applications due to their file modification behavior. This is a false positive. Sekura is signed with valid certificates and doesn't contain malware. You can add Sekura to your antivirus exclusion list or report the false positive to your antivirus vendor.