Inklave is an air-gapped E-Ink tablet built around an EAL 4+ Secure Element, post-quantum encryption, and active defenses against physical coercion. No radios. No cloud. No compromise.
The most effective attack requires no code at all. Physical coercion bypasses every password, every key, every encryption layer. Unless the device fights back.
Your files live on someone else's server. One breach, one subpoena, one rogue employee, and your secrets are gone.
WiFi. Bluetooth. Cellular. NFC. Every radio is a door you can't lock. Your phone has dozens, always broadcasting.
Encryption in software is only as strong as the OS beneath it, and your OS has millions of lines of attack surface.
A vault and its backup, engineered to work together and trust nothing else.
See your secrets. Touch nothing else. An E-ink display with biometric access and hardware-encrypted storage that never connects to a network.
Backup that forgets on disconnect. Keys exist only in RAM and never touch persistent storage. Pull the plug and they're gone. No trace left behind.
Six capabilities that turn a tablet into a fortress. Select one to see it in action.
Built outward from an EAL 4 AVA_VAN certified Secure Element , the hardware root of trust at the heart of every Inklave. To reach your secrets, an attacker must defeat all five layers. In person, with the device in hand.
The outermost layer is the absence of a door. Inklave carries no WiFi, Bluetooth, cellular, or NFC hardware, so there is no network stack to exploit and no signal to intercept. An attacker cannot reach the device remotely from across the room or across the world. They have to be standing next to it.
Even holding the device, an attacker meets the next wall. Your fingerprint is matched inside the Trusted Execution Environment, never in general-purpose software, so there is no login screen to brute force and no token to steal. No fingerprint, no entry, and no software path around it.
Should someone desolder the flash and read it directly, they find only ciphertext. Two layers deep: LUKS2 full-disk encryption seals the filesystem, then a NIST-standardized post-quantum cryptographic layer wraps every secret on top. No homegrown crypto anywhere in the stack -- only publicly vetted, standardized algorithms, the same open-standards philosophy behind LUKS2 and OP-TEE. The keys never leave the Secure Element. The raw chip is useless without the silicon that guards them.
The decryption itself happens in a walled-off secure world. OP-TEE partitions memory so that the normal operating system can never observe the keys in use, even if that OS is fully compromised. Secrets are processed in a room the rest of the system is not allowed to enter.
The heart of the entire system. An EAL 4 AVA_VAN certified, tamper-resistant chip that serves as the hardware root of trust. Every master key is generated and stored inside this silicon, physically resistant to probing, fault injection, and side-channel attacks. The Secure Element is the reason every other layer holds: without it, there are no keys, no decryption, no data. Reach this, and you face a vault designed to destroy its own contents before surrendering them.
Some things are too valuable for the cloud. Too private for a password manager. Too important to leave to chance.
You hold the keys to a fortune in crypto. If something happens to you, those keys vanish permanently. No exchange can recover them. No lawyer can subpoena them. They simply cease to exist. Unless they’re on Inklave.
Three bank accounts. A safety deposit box. Twenty years of passwords. Gold in a vault your children don’t know about. If something happens to you tomorrow, your family inherits confusion, or worse, nothing. Inklave turns inheritance into a handoff, not a scavenger hunt.
A vindictive ex. A stalker. A border crossing in the wrong country. Some threats don’t come from hackers. They come from people who already know your name. Inklave’s dummy mode shows a clean device on command. The real contents stay invisible, even under duress.
One device. Every secret. Zero exposure.
Inklave is in active development. Join the waitlist for early access and founder pricing.
No spam. Unsubscribe anytime.