Loading downloads…
Why two apps and not one
- Because one unlock should not open both.
- A second factor exists so that somebody who has your password still cannot get in. Keep the password and the code in one vault behind one sign-in and you have quietly undone that. Fistbump and Whisper have separate vaults, separate passkeys and separate sign-ins — you sign into each.
- They still feel like one thing.
- The browser companion fills a password from Whisper and a code from Fistbump in the same flow. It never holds your vault; it asks the apps you have already unlocked.
- We cannot read either of them.
- Everything is encrypted on your device before it is stored. Our servers hold a blob they have no key for, and there is no code path that would accept one — not a promise about what we would do, a fact about what we can do.