If you lose both keys, your data is gone.
If you lose your passphrase and recovery key, your things are gone. Nobody at Fort can open your vault or reset it for you. The optional recovery key is shown once. Keep it somewhere safe and separate from your phone.
Fort does not keep a cloud copy.
There is no Fort cloud. On Android, Fort is built to keep the vault out of phone backups (built, not yet tested on a phone). On iPhone, this exclusion is not built yet, so an encrypted copy may be included in your iPhone backup. Your own encrypted backup file is yours to keep. If your phone and your only copy are lost, a recovery key alone cannot bring back a missing vault.
Phones have their own risks.
If your phone has spyware, or is rooted or jailbroken, it may see what is on screen while Fort is open. Fort cannot stop someone who forces you to unlock it. Fort does not remove copies from other apps or places.
Screenshots work differently by phone.
On Android, blocking screenshots and screen recording on vault screens is planned. iPhone does not let apps block screenshots. Fort is planned to hide the screen while recording and warn after a screenshot on iPhone. These protections have not been tested on a real phone.
Fort is not a crypto wallet.
Fort keeps words, not money. It does not send, receive or manage crypto. Seed phrase copying is off by default. A seed phrase on any phone is less safe than one written down and kept offline. If you hold a lot of crypto, keep the paper or metal copy as your main copy.
Your original stays where it is.
Fort keeps its own copy of a file or photo. It does not remove your original from Files, Photos or anywhere else. After importing an Am I Hacked file, Fort reminds you to delete the original file yourself. Fort cannot delete files it did not make.
Opening an Am I Hacked locked file
Am I Hacked’s clean-up is planned to make a locked file on your own laptop. The password will be made and shown only on your laptop screen, and it never travels. Fort is optional: you can keep the locked file anywhere you like. If you bring it into Fort, the planned order is:
- Match the file's fingerprint (SHA-256) to your receipt.
- Open it with your password.
- File the items inside your vault.
- Fort reminds you to delete the original file yourself, in Files or Downloads.
A matching fingerprint shows the file is the one on your receipt. It does not prove every item inside is safe.
A paid plan will not hold your data hostage.
A paid plan is planned as a subscription. The price is not set. If you stop paying, you can still open, read, export and delete everything already in Fort.
Some details are still being decided.
Launch countries are not set yet. Fort has not had an outside security review. The phone protections and iPhone backup exclusion have not been verified on a real device.