LifeSafe
Overview
LifeSafe is the HighRisk-tier safeword behavior for Spaces that a user has marked as sensitive. When the safeword PIN is entered, those sensitive Spaces are deleted. The PIN is received by the server and the feature is applied server-side so a compromised device does not reveal, through different local behavior, that the safeword PIN was used instead of the normal access PIN.
How It Works
- Sensitive Spaces Selection: Users mark selected Spaces as sensitive.
- Safeword PIN: Users set a safeword PIN distinct from the normal Safe PIN.
- Server-Side Handling: The entered PIN is sent to the server, which applies the deletion behavior there so the compromised device does not expose a distinct local signal.
- Sensitive Space Deletion: When the safeword PIN is used, the Spaces marked as sensitive are deleted.
- HighRisk Scope: This deletion behavior is the HighRisk-tier version of the safeword response.
Security Implications
- Protection for Sensitive Spaces: LifeSafe helps protect selected Spaces when a user must open the Safe under pressure.
- Plausible Deniability on a Compromised Device: Because the server applies the outcome, an adversary watching the device should not be able to distinguish safeword entry from normal PIN entry through local behavior.
- Irreversible Tradeoff: In HighRisk, the marked Spaces are deleted rather than hidden.
Use Cases
- High-Risk Operatives: Whistleblowers or activists can delete selected sensitive Spaces under threat.
- Cryptocurrency Security: Investors can protect particularly sensitive wallet material if their threat model justifies deletion.
- Corporate Data Protection: Executives can mark critical Spaces as sensitive and have them deleted if coerced.
- Shared Space Caution: If a marked sensitive Space is also a Shared Space, the result depends on whether the acting Safe is the owner.
Why It Matters
LifeSafe is the irreversible version of UnoLock's safeword response. It exists for users whose threat model calls for deletion of selected sensitive Spaces rather than merely hiding them.
FAQs
Can any data be recovered after LifeSafe is triggered?
The Spaces marked as sensitive are intended to be deleted when the safeword PIN is used.
How does LifeSafe differ from Duress Decoy?
LifeSafe deletes selected sensitive Spaces. DuressDecoy hides selected sensitive Spaces instead.
Is the LifeSafe safeword PIN secure from attackers?
The server receives the entered PIN and applies the LifeSafe behavior server-side so the compromised device does not visibly branch when the safeword PIN is used.
What if a sensitive Space is also a Shared Space?
If the owner Safe deletes the Shared Space, it is deleted for every participating Safe. If a non-owner Safe loses access to that Shared Space, the data remains for the owner and other participants.
Compliance & Privacy Regulations
- Privacy-Preserving Operation: LifeSafe is implemented to support plausible deniability without exposing a distinct local signal on a compromised device.
Integration with Other Features
- Spaces: LifeSafe applies to Spaces that the user has marked as sensitive.
- PIN Code: The feature is activated through the safeword PIN rather than the normal Safe PIN.
