A code, a fingerprint, or both — really.
How should you lock your vault? Ozorys opens three doors — the PIN, biometrics, or both combined — and honours a distinction few apps respect: the difference between looking the part and being it.
Three doors, one vault
Ozorys doesn't impose its way of locking on you: you choose. Three modes are available — PIN alone, biometrics alone, or PIN and biometrics combined. Each is a conscious decision, switched on by you, never by default.
One thing never changes, whichever mode you pick: Zero-Knowledge holds. None of these doors entrusts your key to a server; they all keep it on your side.
Security and convenience aren't balanced the same way by everyone. Ozorys lets you choose your door — and change it — without ever conceding anything on the encryption.
Biometrics: convenient, but not magic
Placing a finger or showing your face is quick and pleasant. But let's be clear-eyed about what biometrics actually does: it doesn't “recognise” your data, it unlocks a key held in your device's secure enclave (via modern system mechanisms such as WebAuthn). Underneath, the security always rests on cryptography.
In other words, biometrics is an access convenience laid on a solid foundation — not a magic substitute for encryption. Worth understanding, so you can choose knowingly.
Biometrics unlocks a key; it doesn't replace encryption. It makes access smooth; it's the cryptography underneath that makes your data unreadable.
MFA in name only versus real MFA
Here's the distinction almost nobody explains. Many apps advertise “multi-factor” while operating on OR logic: the code OR the fingerprint opens the vault. Two options, but one factor is enough — that isn't really multi-factor, just a choice of door.
Ozorys's combined mode operates on AND logic: both factors are mixed to derive the key. Without the code AND the biometrics, the key doesn't reform. That's real cryptographic MFA — both are required, not offered as alternatives.
“Code or fingerprint” offers the convenience of multi-factor, not its strength. “Code and fingerprint”, combined into the key, genuinely require both: that's the difference between looking the part and being it.
The recovery phrase, compulsory in combined mode
Real MFA has a direct consequence: since the key requires both factors, losing one of them — changing phone, resetting biometrics — could lock you out. That's why, in this mode, Ozorys makes the recovery phrase compulsory: it's your emergency exit.
It isn't an arbitrary constraint, it's the logical price of robustness. The stronger the lock, the more carefully the spare must be kept.
Real MFA with no emergency exit would be a trap. The compulsory recovery phrase is the promise that a very solid lock never turns against you.
Let's check it stuck
Six questions, marked instantly. Your answers never leave this page.
1. How many locking modes does Ozorys offer?
Each is a conscious choice, switched on by you; Zero-Knowledge holds in all of them.
2. What does biometrics actually do?
An access convenience laid on a cryptographic foundation — not a magic substitute.
3. MFA “in name only” operates on…
Two options, but one factor suffices: that isn't really multi-factor.
4. Ozorys's real MFA (combined mode) operates on…
Without the code AND the biometrics, the key doesn't reform: both are genuinely required.
5. Why is the recovery phrase compulsory in combined mode?
It's the logical price of a very solid lock: an emergency exit.
6. In every mode, what never changes?
None of these doors entrusts your key to a server.
Today's challenge
Choose your locking mode in Ozorys deliberately. If you go for combined mode, write down your recovery phrase off the device straight away: the strongest lock deserves its spare.