When you register, your device creates a private key — your secret — and from it a complement master key. Your secret private key is never sent to the server, only the master key. You can use your secret key to generate a trusted key, one for every device! Trusted keys prove your identity to the server without ever revealing the secret key, thanks to zero-knowledge proofs (ZKP). The server only sees proofs, never your secrets, keeping your account and messages private by design.
Private Key: *keep this safe! ••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••