Privacy is often treated as a feature or a promise. Add encryption, write a policy, or comply with a regulation, and privacy is assumed to follow. Our work this past year reinforced our longstanding core principle: privacy holds when it is enforced by system design. When privacy depends on process,
What if Privacy Were the Default? Most digital services still require accounts, personal data, and behavioral tracking permissions, even for simple actions. It’s often assumed that convenience depends on identity. But that assumption is outdated. Tools like anonymous credentials make it possible to build services where an identifying profile is
The zero-knowledge space is rapidly gaining traction as privacy becomes a critical concern due to the daily news of data breaches that expose personal information to malicious actors. With the exponential growth of data collection and the increasing reliance on cloud services and decentralized technologies, individuals and organizations are seeking
Human-centered design is one of the key approaches Least Authority adopts alongside security- and privacy-by-design. Our human-centered design process involves building an understanding of user needs and experiences, while using those learnings to shape design and development goals and iterations. The case studies below provide examples of this approach. The
The following document is an extract from Magic Crystal, which describes how to leverage social secret sharing with Dark Crystal using Magic Wormhole for identity-less transport without using any Public Key Infrastructure. The document also includes a protocol design for developers wanting to integrate this feature into their application. It
Least Authority is pleased to announce the launch of Destiny, a free end-to-end encrypted application that allows you to transfer files without revealing your identity. The desktop app Mac, Windows, Linux is available for download via Github. The app for iOS/iPad OS is available via the App Store. The app
August concluded the NGI_Trust-funded MW4ALL 2.0 project, aimed at building an identity-less secure file transfer web application based on the Magic Wormhole protocol. Magic Wormhole is a protocol that allows for the rapid and secure sharing of data between two parties without either needing to know the other’s identity. Files
Least Authority is pleased to announce the publication of the Zero Knowledge Access Passes (ZKAPs) Whitepaper. The paper is intended both for technical and non-technical audiences. ZKAPs, or Zero-Knowledge Access Passes, provide an anonymous, token-based authorization protocol based on Privacy Pass that facilitates an online exchange of value while disconnecting