Account & privacy
Privacy & security
End-to-end encrypted and local-first: built so Zukunft can't read your data, not just promised.
Zero-knowledge encryption
Your financial data is encrypted on your device under a key derived from your vault passphrase. The key never leaves your devices; the server only ever stores ciphertext. That means Zukunft cannot read your finances — and neither can anyone who breaches the server.
Local-first, works offline
Your data lives in a database on your device first, and the projection engine runs there too. The app opens and works with no connection, and interactions like dragging a slider are instant because nothing waits on a server.
Backups and device sync
Your database is local-only by default. You can turn on optional encrypted remote backups so a lost device doesn't mean lost data, and sync across devices end-to-end encrypted — unlock a new device with your passphrase and it receives ciphertext the server never could read. Your data is exportable whenever you like.
Passphrase and recovery
Because only you hold the key, Zukunft cannot reset a forgotten vault passphrase — that's the cost of zero-knowledge, and the point of it. Keep the passphrase somewhere safe. On devices you trust you can register a passkey, so day-to-day unlocking is biometric and the passphrase is the fallback.