Limits
Not covered.
None of these are solved by the card. Some are not solvable by any product.
-
I
A compromised phone
If the device you decrypt on is already controlled by someone else, they can see what you see.
-
II
A forgotten password
There is no reset, no recovery, no support case. The vault stays closed.
-
III
Being made to open it
A card can be taken and you can be pressured. Physical possession cuts both ways.
-
IV
Bad secrets
A weak password stored carefully is still a weak password.
-
V
Losing all three
Three cards in one drawer is one card. Distribution is the protection.
Why publish this
A product that knows its edges.
Every security product has a threat model, and most of them hide it behind adjectives. Ours is narrow: keep a small number of high-value secrets off networks and in your possession, encrypted, in a form that survives a wallet.
Outside that boundary, ordinary advice applies and we will not pretend otherwise. Keep your phone updated. Use different passwords. Be suspicious of anyone in a hurry.
The limits
are part of the spec.