Zero-knowledge: what it actually means, in plain language

"Zero-knowledge" is one of the most overused phrases in privacy marketing, and one of the most precisely defined terms in cryptography. Those two facts don’t sit well together. Here is what the term is actually supposed to mean, and a simple way to check whether a product that claims it is telling the truth.

The actual definition

A zero-knowledge system is one where the service provider has zero knowledge of your data’s content — not "we choose not to look," but "there is nothing in our possession that could be turned into your content, even under legal compulsion, even by us." The provider stores or transmits your data, but only ever in encrypted form, and only you hold the key that decrypts it.

That last part is the part that separates real zero-knowledge systems from marketing language. If the company can reset your "encryption" when you forget your password, they hold a key. If they can generate a report on the content of your notes for a support ticket, they hold a key, or the data isn’t actually encrypted for them. The test is simple:

Could this company technically hand over readable copies of my data if legally forced to? If the honest answer is yes, it isn’t zero-knowledge — no matter what the landing page says.

How to verify it, instead of trusting it

Real zero-knowledge architecture has a specific, checkable shape: encryption happens on your device before anything is transmitted, the key is derived from something only you have (a password, a recovery phrase, a hardware key) and never leaves your devices, and password recovery is either impossible or requires a separate recovery secret you generated yourself — never a "forgot password, we’ll reset it" flow, because that flow is only possible if the company can also reset your encryption.

On Prevon, that recovery secret is a 12-word Recovery Seed generated on your device the first time you set up the vault. Nobody at Prevon ever sees it, stores it, or can regenerate it for you. That is inconvenient in exactly one scenario — losing it means losing access to anything not otherwise unlocked — and that inconvenience is the whole point. A system that can always bail you out is a system that always holds the key.

Why it matters more for AI features than anything else

Zero-knowledge encryption has existed in password managers and some cloud storage for years. It matters more now because AI features are becoming the default way apps process your data — and most AI features require the provider to read your content to run the model. A note-taking app with a zero-knowledge vault and a cloud AI feature has a hole in the middle: the vault is private, but the moment AI touches your notes, they leave the vault in readable form. Closing that hole is why Prevon’s AI runs entirely on-device instead of in the cloud — a separate, deliberate architectural decision covered in the next post.