How VeePKey works
Three locks.
One key.
Most devices that ask for a PIN are just checking it against a list, like a bouncer with a clipboard. VeePKey does something different: your PIN is part of the lock itself. Here's what that actually means, in plain terms.
01 — The problem
A PIN that's just a checkbox doesn't protect much.
Imagine a diary with a little lock on the front. The lock keeps casual snoopers out. But if someone really wants in, they don't pick the lock — they just tear out the pages. The lock was never protecting the words on the page. It was only guarding the cover.
A lot of "secure" electronics work exactly like that diary. There's a PIN screen, and if you get the PIN wrong, the device says no. But underneath, the actual data is often sitting there in a readable form — the PIN is a doorman, not a lock. Anyone who can get at the memory chip directly, by desoldering it or reading it with the right lab equipment, can walk straight past the doorman and read the pages.
VeePKey is built so that isn't true. Getting physical access to the device isn't enough. Getting a raw copy of everything stored inside isn't enough either. There's a third gate, and it's the one that actually matters most — because it's the one built from your PIN itself, not just checked against it.
02 — The mechanism
What an attacker actually has to get through.
Sealed startup
VeePKey only ever runs software we've digitally signed. If someone tries to quietly swap in a modified version to spy on what you type or hand over your data, the device simply refuses to start. This is the same idea as a tamper-evident seal — except it's enforced by the hardware itself, not a sticker.
Scrambled storage
Everything on the chip — every credential, every setting — is encrypted at the hardware level. Even someone who physically removes the memory chip and reads it directly with lab equipment gets back nothing but noise, because it's scrambled using a key that never leaves that one piece of silicon.
PIN-woven key
This is the gate most devices skip. Your PIN isn't just compared against a stored answer — it's mathematically folded into the encryption key itself, through a deliberately slow process repeated thousands of times. Even someone holding a perfect, unscrambled copy of your data still has to guess your actual PIN, one slow guess at a time, to unlock anything real.
03 — The numbers
Why "deliberately slow" matters more than it sounds.
Here's the part that's easy to miss: making each guess a little slower doesn't sound like much. But guessing is a numbers game, and small changes to the guess compound into enormous ones.
Below is a rough comparison, estimating for the kind of custom, purpose-built computing hardware a well-funded government could plausibly assemble — not a laptop, not a gaming PC, something well beyond that. Even against that level of resource, PIN length does almost all of the work.
The bar widths are illustrative, not to scale — the real numbers span such an enormous range that drawing them proportionally would make the first two invisible. The point stands regardless: a short PIN is a checkbox no matter how slow you make the math, and a long one turns even extreme computing power into a non-issue. Choose the longest PIN this device and your memory can comfortably handle.
04 — In plain terms
What we won't claim.
Every security product that says "unhackable" is telling you it doesn't understand security, or hoping you don't. So instead, here's exactly where this design's protection stops.
Honestly, here's the fine print
- It protects data at rest, not data in use. If malicious software is secretly installed on the device while it's genuinely running (a much harder attack than reading a stolen chip), it could see a PIN as you type it. Gate 1 exists specifically to make that installation step extremely difficult.
- A short PIN is still a short PIN. No amount of deliberately-slowed math turns a 4-digit PIN into a strong one — the slowdown multiplies whatever strength is already there. Length and unpredictability are still yours to provide.
- "Longer than practical" isn't "impossible." Given unlimited time, budget, and motivation, any lock can eventually be worked on. Our goal is to make that cost so disproportionate to any plausible reward that it stops making sense to try — not to claim a mathematical impossibility that doesn't exist.
Three separate things have to go wrong, not one.
That's the actual design goal behind VeePKey: not a single strong wall, but three independent ones, each guarding the next. Losing the device is not the same as losing what's on it. Reading the chip is not the same as reading your data. And your PIN was never just a password — it's stitched into the lock itself.
VeePKey — security, explained plainly