Open your vault — and hand the key to no one.
Before the first euro is entered, Ozorys asks for a founding gesture: choosing the code that will encrypt everything. This module explains what really happens at that moment — and why it is a quiet revolution.
A vault, not an account
At opening, no e-mail, no “forgot your password?”, no server that knows you. Ozorys creates an encrypted vault on your device and hands you its only key: your PIN code. The difference is not cosmetic — it is a complete reversal of the balance of power.
From that code, the application derives an encryption key through 600,000 iterations of computation (PBKDF2), then seals every piece of data in AES-256-GCM — the standard of states and banks. Your amounts, your categories, your notes: all unreadable without that key, including by us.
Zero-Knowledge means literally “zero knowledge”: our servers hold neither your code, nor your key, nor the slightest readable copy of your data. What we do not possess can be neither sold, nor hacked, nor demanded.
The founding warning: Ozorys tells you plainly, before your PIN even exists.
The responsibility that comes with freedom
This architecture has an accepted flip side, written in black on gold from the very first screen: if you lose your secret code, your data will be permanently undecipherable. No one can restore it — not even the Ozorys team. And that is precisely the proof that the system keeps its word.
The answer is not to pick a weak code: it is to prepare your backup from day one. Ozorys guides you towards its three-strand safety net — the device, an encrypted file, the Tribu cloud — and all the way to the printable QR master key, to file with your precious papers. Module 19 devotes an entire lesson to it.
A forgotten code with no backup prepared is a vault welded shut forever. Three minutes of preparation today buy a lifetime of peace.
Choosing a code worthy of a vault
The Ozorys PIN is not the four-digit code of your bank card: the longer it is, the more the derivation makes every attempt costly for anyone trying to force the door. Avoid birth dates and obvious runs; prefer a sequence that belongs to you alone — a little rhythm your fingers know and your circle cannot guess.
And if eyes wander over your shoulder? The application stands guard: discreet mode veils your amounts in one gesture, and a sharp shake triggers the Panic Shake — immediate lock, event recorded in the Security Journal. You are at home, behind an armoured door.
Treat this code like the combination of a real safe: never in an e-mail, never as a plain note in the phone. If you must write it down, do it on paper, far from the device.
The opening ritual
Every session begins with a small ceremony: the code pad, then your first name appearing — “Good day” or “Good evening” depending on the hour — and the ring of your money left to live waking up, golden halo, figures revealing themselves. Three seconds that say: this is your home.
This theatre is not gratuitous: it installs the habit. One gladly returns to a place that welcomes you — and a budget consulted every day is a budget that tells the truth. The ritual is the first step of the method; two-tap entry, in the next module, is the second.
The ritual: your name, the breathing ring — the vault recognises you.
Let's make sure it stuck
Six questions, instant correction. Your answers never leave this page — of course.
1. What do Ozorys servers keep about your PIN code?
That is the very definition of Zero-Knowledge: neither the code, nor the key derived from it, nor the slightest readable copy of your data ever leaves your device.
2. Your encryption key is obtained through…
The 600,000 iterations make every code attempt deliberately expensive: brute force becomes unaffordable. The data itself is sealed in AES-256-GCM.
3. You lose your code, with no backup prepared. What can the Ozorys team do?
No one holds a duplicate of your key. That is the accepted counterpart of sovereignty — hence the backup to prepare from day one.
4. The real answer to losing the code is…
The device, an encrypted file, the Tribu cloud — plus the printable master key: losing your data would then take real determination.
5. A good Ozorys PIN looks like…
Derivation makes every attempt expensive, but a guessable code cancels everything: no dates, no runs — a rhythm of your own, known to your fingers.
6. A sharp shake of the phone…
The vault's survival reflex: screen locked on the spot, event time-stamped in the Security Journal.
Today's challenge
Open (or reopen) your vault and perform the three sovereign gestures: check that your code is neither a date nor a run, trigger an encrypted backup, and locate where to print your paper QR key. Ten minutes today — a lifetime of calm.