Privacy & Security
Encryption, authentication and the security concepts behind VPNs and password managers.
DNS Leak
A DNS leak is a failure mode in which DNS lookup requests — the translations of domain names into IP addresses — are sent to a default, unencrypted DNS server outside the VPN tunnel, revealing browsing destinations despite an active VPN connection.
End-to-End Encryption
End-to-end encryption is a communication method in which data is encrypted on the sender's device and only decrypted on the recipient's device, so no intermediary — including the service provider — can read the content in transit.
Kill Switch
A kill switch is a VPN client feature that monitors the VPN connection and, if it disconnects unexpectedly, immediately cuts off the device's internet access until the VPN reconnects, preventing traffic from leaking outside the encrypted tunnel.
Multi-Factor Authentication
Multi-factor authentication is a security process that requires a user to verify their identity using two or more independent factors — such as a password, a device-generated code, or a biometric — before granting access to an account.
Passkey
A passkey is a passwordless authentication credential based on public-key cryptography, where a private key stays securely on the user's device and a matching public key is registered with the service, unlocked locally via biometrics or a device PIN.
Password Manager
A password manager is an application that generates, encrypts and stores login credentials for multiple accounts, retrieving and autofilling them when needed so users can maintain unique, strong passwords without memorising each one.
VPN
A VPN is a service that creates an encrypted tunnel between your device and a remote server, so your internet traffic is hidden from your local network and your public IP address is replaced with the server's address.
Zero Trust
Zero trust is a security architecture built on the principle of 'never trust, always verify', requiring continuous authentication and authorisation for every user and device requesting access to resources, regardless of whether they are inside or outside the traditional network perimeter.
Zero-Knowledge Encryption
Zero-knowledge encryption is a design where encryption keys are generated and kept on the user's device rather than the provider's servers, so the provider stores only unreadable ciphertext and has no technical ability to decrypt it.