Risk
Status
Counts follow the departments selected in the top picker.
Both users are created now. Each user has three password fields - all three must be entered, in order, at every login. Choose words that are not guessable. Passwords are never sent to the server.
This runs once. It derives keys in your browser (PBKDF2-SHA256, 600,000 rounds), encrypts the entire findings database with AES-256-GCM, uploads only ciphertext, and deletes the plaintext seed from the server.
All three fields are replaced. Only the key wrapper changes - the data itself is not re-encrypted.