Sara Larson (@SaraLarsonDev) header
Sara Larson (@SaraLarsonDev) profile picture

Preschool Director 🌿edtech

Oregon
Joined February 2026
Photo by Sara Larson (@SaraLarsonDev)Photo by Sara Larson (@SaraLarsonDev)Photo by Sara Larson (@SaraLarsonDev)Photo by Sara Larson (@SaraLarsonDev)Photo by Sara Larson (@SaraLarsonDev)Photo by Sara Larson (@SaraLarsonDev)Photo by Sara Larson (@SaraLarsonDev)Photo by Sara Larson (@SaraLarsonDev)Photo by Sara Larson (@SaraLarsonDev)Photo by Sara Larson (@SaraLarsonDev)
I built Qerron — that's KEHR-on — on the Internet Computer, because ICP is the best tech we have for a private vault that shouldn't live on a company's servers. Most vaults still sit in a private database the company can open, sell, or lose. Qerron doesn't. The app runs in canisters on a public network. It's end-to-end encrypted, so even I can't read what you store. Nothing is unhackable, but this is a different foundation than an app sitting on one company's machines. You open it with a passkey — Face ID or your fingerprint — not a password. No account set up ahead of time. No crypto to buy. You can try it for free. You put in the things you'd only want your people to have. You can share a one-time link when you mean to. And if you stop checking in, the people you named can still get access. That's not a will, and it's not legal advice. It's a lock with a plan for later. A lot of us in this community have been waiting for products that actually use ICP — not just another web app with a wallet button. That's what I wanted to ship. If you're in the ICP community, try it and tell me what breaks. qerron.com/ #ICP #InternetComputer #DFINITY #Web3 #Passkeys
3
1
2
18,649
Hey thanks for asking Yes — Qerron uses vetKeys, not a client-only key. It's built on EncryptedMaps: the vault key is derived through ICP's vetKD threshold protocol, then used in the browser to encrypt before anything is stored. The canister only sees ciphertext. A device can cache the derived key material locally so it doesn't re-derive on every visit, but that cache isn't the source of the key, and no one on our side holds a key that can open the vault.
6