Your Digital Life and Cryptography

Time-based One-Time Passwords (TOTP), used in apps like Google Authenticator, are generated using HMAC-SHA1 applied to the current timestamp and a shared secret.

The server and your phone independently compute the same code because they share the secret and both know the current time. An attacker who intercepts one code cannot reuse it because it expires after 30 seconds.

Password managers like 1Password and Bitwarden store your passwords in a vault encrypted with AES-256, the same cipher used by governments and militaries worldwide.

Your master password is never stored anywhere. Instead, it is used to derive the encryption key through a key derivation function like PBKDF2 or Argon2. Without the master password, the vault is computationally infeasible to brute force.

A VPN (Virtual Private Network) creates an encrypted tunnel between your device and a VPN server. All your internet traffic passes through this tunnel, hiding it from your ISP and local network observers.

Most modern VPNs use protocols like WireGuard (ChaCha20-Poly1305) or OpenVPN (AES-256-GCM). The encryption prevents anyone on your local network from seeing what sites you visit.

FileVault on macOS and BitLocker on Windows encrypt every byte on your hard drive using AES-128 or AES-256. Without the decryption key, a stolen laptop reveals nothing.

Modern iPhones and Android devices also encrypt storage by default, tied to your device passcode. Law enforcement cannot access encrypted phone data without the passcode or a significant vulnerability.

The padlock icon in your browser address bar indicates an HTTPS connection. TLS encrypts traffic between your browser and the web server, preventing ISPs, network operators, and nearby attackers from reading or modifying the content.

Browser vendors have pushed hard for universal HTTPS adoption by marking HTTP sites as "Not Secure" and giving HTTPS sites preferential treatment in search rankings.

Signal is considered the gold standard of secure messaging. It uses the Signal Protocol for E2E encrypted messages and calls, minimizes metadata collection, is fully open source, and is operated by a non-profit.

Signal also supports disappearing messages, note-to-self encryption, and sealed sender, which hides even the sender's identity from Signal's servers during transmission.

Apple's iCloud Advanced Data Protection enables end-to-end encryption for iCloud backups, meaning Apple itself cannot access your backup data. The keys exist only on your trusted devices.

Without this feature enabled, Apple holds the keys to your backup and can be compelled to provide them to authorities. E2E backup encryption is an important but often overlooked privacy setting.

A cryptocurrency wallet is fundamentally a pair of cryptographic keys: a private key (secret) and a public key (your wallet address). Transactions are signed with the private key to prove ownership.

Losing your private key means losing your funds permanently. There is no password reset or customer support. The cryptographic system is mathematically unforgiving of lost keys.

When you use Face ID or fingerprint authentication, your biometric data is processed inside a Secure Enclave, a separate processor with its own encrypted memory and keys.

The biometric template never leaves the Secure Enclave and is never transmitted to Apple or Google. Authentication happens locally, with the Secure Enclave confirming a match and releasing the device key.

Strong ubiquitous cryptography means private communication is possible even under surveillance, financial transactions are authenticated and tamper-evident, and your stored data is protected even if devices are seized.

Critics argue this makes lawful interception harder for governments. Cryptographers argue that backdoors fundamentally weaken security for everyone and that strong encryption is a net benefit to society.

Many of the cryptographic tools protecting your daily digital life are open source: Signal Protocol, OpenSSL, LibreSSL, GnuTLS, WireGuard, and the Linux kernel's crypto subsystem.

Open source cryptography allows public scrutiny by experts worldwide. Unlike proprietary black-box implementations, open source code can be independently audited, verified, and improved by the cryptographic community.

Test your knowledge of cryptography in everyday digital tools.

Cryptography protects nearly every aspect of your digital life: 2FA codes, password manager vaults, VPN tunnels, full-disk encryption, HTTPS browsing, secure messaging, encrypted backups, and cryptocurrency wallets.

Understanding which tools use which cryptographic primitives helps you make better security decisions and appreciate why certain privacy settings matter.