For usability, CipherDrive™ may store local key material, wrapped keys, or unlock state in your browser or device. This can let you reopen encrypted storage without entering a PIN or passphrase every time.
A zero-knowledge service still needs a practical way for your trusted client to decrypt files. If every page refresh required you to rebuild the full key hierarchy from scratch, the product could become unnecessarily difficult to use.
Local key state can provide continuity on a device you already trust.
Depending on the active client and security configuration, local state may include:
wrapped key material;
a local browser key;
device-associated key material;
temporary or remembered unlock state;
other cryptographic state required by the client.
The exact implementation can change over time and may differ by client or feature.
No. Zero-knowledge in CipherDrive concerns the server-side storage boundary. Keeping required key material on a user's own trusted device is compatible with a system in which Ackaia servers do not ordinarily possess the plaintext master key or file keys.
Convenience creates an endpoint-security responsibility. If an attacker controls your browser, operating system, device account, extension environment, or already-unlocked session, local key material may be exposed.
This is considered a compromised-endpoint risk, not a server-side zero-knowledge failure.
You may need to unlock the vault again after events such as:
clearing browser or site data;
using a different browser profile;
moving to a new device;
removing remembered access;
security-related resets;
local application data being removed.
Keep the operating system and browser updated.
Use a strong device lock.
Avoid untrusted browser extensions.
Do not unlock sensitive vaults on public or shared computers.
Revoke sessions or clear local access on devices you no longer control.
Maintain separate recovery material where available.
Important: No cloud encryption model can fully protect plaintext after the trusted endpoint itself has been compromised.