1import{C as d}from"./Card-B1HR1SGn.js";import{_ as p,I as c,c as y,a as t,d as s,w as n,r as a,o as m,b as o}from"./index-CZlSjks0.js";import{P as f}from"./PageHeader-BgZ6sk5m.js";import{_ as h}from"./Spark Logo White-oX9e66Gu.js";const k={name:"Security",components:{Card:d,Icon:c,PageHeader:f}},g={class:"feature-page"},b={class:"container"},v={class:"grid grid-3"},w={class:"feature-icon"},P={class:"feature-icon"},S={class:"highlight-content"},x={class:"section"},I={class:"grid grid-2"},B={class:"highlight-content"},N={class:"extra-layers"};function z(C,e,O,D,E,H){const l=a("Icon"),i=a("router-link"),u=a("PageHeader"),r=a("Card");return m(),y("div",g,[t("div",b,[s(i,{to:"/features",class:"back-link"},{default:n(()=>[s(l,{name:"chevron",size:"sm",class:"back-chevron"}),e[0]||(e[0]=o(" Back to Features ",-1))]),_:1}),s(u,{title:"Security & Unlock",subtitle:"Device-key encryption, biometric unlock, and a seed phrase you control.",icon:"check"}),t("div",v,[s(r,{class:"feature-card"},{default:n(()=>[t("div",w,[s(l,{name:"check",size:"lg"})]),e[1]||(e[1]=t("h3",null,"Device-Key Encryption",-1)),e[2]||(e[2]=t("p",{class:"text-secondary"}," Your seed is encrypted with a key bound to this device. It can't be read by other apps or copied off the phone. ",-1))]),_:1}),s(r,{class:"feature-card"},{default:n(()=>[t("div",P,[s(l,{name:"wallet",size:"lg"})]),e[3]||(e[3]=t("h3",null,"App Lock",-1)),e[4]||(e[4]=t("p",{class:"text-secondary"}," Lock the app behind fingerprint or face unlock, including on cold start. Phones without strong biometrics fall back to the device PIN or pattern. ",-1))]),_:1}),s(r,{class:"feature-card"},{default:n(()=>[...e[5]||(e[5]=[t("div",{class:"feature-icon spark-icon"},[t("img",{src:h,alt:"Spark",class:"feature-logo"})],-1),t("h3",null,"Seed Phrase Backup",-1),t("p",{class:"text-secondary"}," Your 12 words are the only real backup. Write them down, store them offline, and you can always restore. ",-1)])]),_:1})]),s(r,{class:"highlight-card"},{default:n(()=>[t("div",S,[t("h3",null,[s(l,{name:"tabler:lock",size:"sm"}),e[6]||(e[6]=o(" How Your Wallet is Protected",-1))]),e[7]||(e[7]=t("p",null," BuhoGO replaces the old PIN-based unlock with a model that leans on the security chip already in your phone: ",-1)),e[8]||(e[8]=t("ul",{class:"security-list"},[t("li",null,[t("strong",null,"AES-256-GCM"),o(" encrypts your seed phrase at rest.")]),t("li",null,[t("strong",null,"Device-bound key"),o(" stored in the secure element. The key never leaves the phone.")]),t("li",null,[t("strong",null,"App lock"),o(" gates every app open, a kill and reopen included. Biometrics where the phone has them; the device PIN or pattern where it doesn't.")]),t("li",null,[t("strong",null,"Local only"),o(" - your seed and the encryption key stay on your device and never hit a server.")])],-1))])]),_:1}),s(r,{class:"info-card pin-migration"},{default:n(()=>[t("h3",null,[s(l,{name:"tabler:compass",size:"sm"}),e[9]||(e[9]=o(" Coming From a Previous Version?",-1))]),e[10]||(e[10]=t("p",null," Older builds of BuhoGO used a 6-digit PIN to unlock the wallet. On first launch of the new version, a one-time migration dialog asks you to confirm your seed, then re-encrypts it with the new device key. After that, the app uses biometrics only. ",-1)),e[11]||(e[11]=t("p",{class:"text-secondary"}," The old app PIN is gone. Your seed phrase is unchanged. Nothing about your balance or history moves. ",-1))]),_:1}),s(r,{class:"info-card",style:{"margin-top":"1.25rem"}},{default:n(()=>[t("h3",null,[s(l,{name:"tabler:cloud-lock",size:"sm"}),e[12]||(e[12]=o(" Encrypted Cloud Backup",-1))]),t("p",null,[e[14]||(e[14]=o(" Prefer a safety net beside the paper backup? BuhoGO can back up all your wallets and your identity to your own Google Drive, encrypted on the device before anything is uploaded. See ",-1)),s(i,{to:"/features/backup",class:"inline-link"},{default:n(()=>[...e[13]||(e[13]=[o("Backup & Restore",-1)])]),_:1}),e[15]||(e[15]=o(". ",-1))])]),_:1}),t("section",x,[e[20]||(e[20]=t("h2",{class:"section-title text-center"},"Safe Habits",-1)),e[21]||(e[21]=t("p",{class:"section-subtitle text-center"}," The things that actually protect your funds ",-1)),t("div",I,[s(r,{class:"security-card do"},{default:n(()=>[t("h3",null,[s(l,{name:"tabler:circle-check",size:"sm"}),e[16]||(e[16]=o(" Do",-1))]),e[17]||(e[17]=t("ul",null,[t("li",null,"Write your seed phrase on paper"),t("li",null,"Store it somewhere fireproof and private"),t("li",null,"Keep multiple copies in separate locations"),t("li",null,"Enable biometrics on your phone"),t("li",null,"Install OS updates when they arrive")],-1))]),_:1}),s(r,{class:"security-card danger"},{default:n(()=>[t("h3",null,[s(l,{name:"tabler:circle-x",size:"sm"}),e[18]||(e[18]=o(" Don't",-1))]),e[19]||(e[19]=t("ul",null,[t("li",null,"Share your seed phrase with anyone"),t("li",null,"Take screenshots of it"),t("li",null,"Store it in plain text: cloud notes, email, chat"),t("li",null,"Type it on sketchy websites"),t("li",null,"Hand your unlocked phone to strangers")],-1))]),_:1})])]),s(r,{class:"highlight-card",style:{"margin-top":"1.25rem"}},{default:n(()=>[t("div",B,[t("h3",null,[s(l,{name:"tabler:shield",size:"sm"}),e[22]||(e[22]=o(" Extra Layers Available",-1))]),e[32]||(e[32]=t("p",null," For public use or shared phones, combine the built-in security with: ",-1)),t("ul",N,[t("li",null,[e[24]||(e[24]=t("strong",null,"Privacy Mode",-1)),e[25]||(e[25]=o(" - hide balance and transaction amounts at a glance. See ",-1)),s(i,{to:"/features/privacy",class:"inline-link"},{default:n(()=>[...e[23]||(e[23]=[o("Privacy Mode",-1)])]),_:1}),e[26]||(e[26]=o(". ",-1))]),t("li",null,[e[28]||(e[28]=t("strong",null,"Kiosk Mode",-1)),e[29]||(e[29]=o(" - a separate PIN that locks the app into a receive-only POS. See ",-1)),s(i,{to:"/features/kiosk",class:"inline-link"},{default:n(()=>[...e[27]||(e[27]=[o("Kiosk Mode",-1)])]),_:1}),e[30]||(e[30]=o(". ",-1))]),e[31]||(e[31]=t("li",null,[t("strong",null,"Secure screen"),o(" - screenshots and screen recording are blocked on sensitive views like your seed phrase. ")],-1))])])]),_:1})])])}const K=p(k,[["render",z],["__scopeId","data-v-a3552701"]]);export{K as default};
Line numbers count LF bytes from the start of the resource, as the search results do. Vendor segments are library code the classifier recognised; they are stored but not indexed. Bytes are shown as Latin1 characters, one per byte.