Essential Rules for SutraOne Users
Tijori & Credential Manager — To ensure your digital vault remains impenetrable, please follow these five security mandates.
Rule 1
The "No Password, No Data" Rule
Your Tijori is a zero-knowledge vault, meaning we never store your actual password on our servers.
The Rule: If you lose your Master Password, your data is permanently locked. We cannot reset it or recover it for you.
Rule 2
The "Emergency Recovery" Rule
Since we cannot reset your password, you must create your own "backdoor."
The Rule: Download and print your Emergency Recovery Kit immediately. Store it in a physical safe or give a copy to a trusted family member. This kit is the only way to regain access if you forget your password.
Rule 3
The "Collaborator" Rule
You have full control over who enters your vault.
The Rule: Only share what is strictly necessary. When you add a Collaborator (like a lawyer or family member), they receive a Read-Only view. You can revoke this access instantly from your dashboard at any time.
Rule 4
The "Device Security" Rule
Your vault is a secure container, but the device you use to open it must also be protected.
The Rule: Always protect your phone or laptop with a strong PIN, Passkey, or Biometrics. Your Tijori is only as secure as the device used to access it.
Rule 5
The "No-SMS" Rule
SMS-based security is vulnerable to hacking and "SIM-swapping."
The Rule: For maximum protection, avoid using SMS for account recovery. Instead, use a Passkey or an Authenticator App (like Google Authenticator or Authy) to provide a significantly higher level of security against unauthorized access.
Summary
While SutraOne provides industry-leading encryption, security is a shared responsibility:
- User Responsibility: You are solely responsible for maintaining the confidentiality of your Master Password, Security Key, Recovery Kit, and device security.
- No Backdoor: Due to our Zero-Knowledge Architecture, we cannot bypass encryption to recover data under any circumstances.
- Limitation of Liability: SutraOne is not liable for data loss resulting from forgotten passwords, lost recovery kits, unauthorized device access, or the actions of collaborators you invite.
- Not Exhaustive: These rules are not exhaustive. Please review our full Terms of Service for a complete understanding of your responsibilities.
Important Legal Disclaimer
While SutraOne provides industry-leading encryption to protect your Tijori, security is a shared responsibility. Please note the following:
- Final Responsibility: These rules are essential for your protection but are not exhaustive. You are solely responsible for maintaining the confidentiality of your Master Password, Recovery Kit, and device security.
- No "Backdoor": Because of our Zero-Knowledge Architecture, SutraOne employees cannot bypass encryption to recover your data under any circumstances—including lost passwords, hardware failure, or forgotten keys.
- No Liability for User Error: SutraOne is not liable for data loss resulting from forgotten passwords, lost recovery kits, unauthorized access to your personal devices, or the actions of Collaborators you have voluntarily invited.
- Updates to Security: Security threats evolve. We reserve the right to update these protocols and recommendations; we encourage users to review our full Terms of Service and Privacy Policy for a complete understanding of our legal protections and your responsibilities.