What "zero-knowledge" means for your money — and why it matters
Zero-knowledge is a simple promise with a strong guarantee behind it: your financial information is built to be unreadable to everyone but you — not even the company that makes the app can see it. Here's what that actually means, and how Misto's does it.
Zero-knowledge, in plain language
Imagine handing someone a locked box and keeping the only key. They can hold the box, move it, even keep it safe for you — but they can never look inside. That's zero-knowledge: the provider stores your data, but it's encrypted with a key that only you have, so they hold something they fundamentally cannot open.
It's a meaningfully stronger promise than "we take your privacy seriously." It's not a policy you're asked to trust — it's an architecture that makes reading your data impossible for anyone without your key, including the people who built the app.
How Misto's applies zero-knowledge
Your ledger lives on your device
By default your financial data is created and kept on your own device — not on a company server. There's no central copy of your ledger for anyone to read.
Backups encrypted before they leave — key only you hold
Anything you back up is encrypted on your device first, with a key derived from your password that never reaches us. We store only an unreadable blob; you hold the one key that opens it.
Even the AI sees only summaries
When you ask Misto for insight, it sends only derived numbers — balances and category totals — never your raw transactions, merchant names, or account numbers. Your ledger never leaves your device.
Zero-knowledge vs. "bank-level security"
Strong encryption in transit and at rest — genuinely good. But the company still holds the keys, so they can read your data, and so can anyone who breaches or subpoenas them.
Everything above, plus the key never leaves you. The provider stores only an unreadable blob, so no one but you can read it — not the company, not an attacker, not anyone with a warrant.
"But what if I lose my device?"
The usual worry about holding your own key: if everything's on your device and only you can decrypt it, what happens when the device is gone? Misto's handles this without ever giving up the zero-knowledge promise.
Turn on encrypted Cloud Backup and a sealed copy is kept safe — unreadable to us — that you can restore on a new device. Or link a new device in seconds by scanning a QR code from one you're already signed in on. Either way, your key stays yours and your data stays readable only by you.
Frequently asked
What does zero-knowledge actually mean?
Zero-knowledge means the app is built so that no one — not even the company that makes it — can read your information. Your data is encrypted with a key only you hold, so the provider stores something it fundamentally cannot open.
How is that different from 'bank-level security'?
'Bank-level security' usually describes strong encryption in transit and at rest — good, but the company still holds the keys and can read your data (and so can anyone who compromises them). Zero-knowledge goes further: even the provider can't read it, because they never have the key.
How does Misto's achieve zero-knowledge?
Two ways working together: your ledger is local-first (it lives on your device), and any backup is encrypted before it leaves, with a key derived from your password that we never see. The result is that your finances are readable only by you.
Does Misto's AI read my transactions?
No. Misto does the math on your device and, when you ask for AI help, sends only derived summaries — balances and category totals — never raw transactions, merchant names, or account numbers.
What happens if I lose my device?
You're covered. Turn on encrypted Cloud Backup and you can restore on a new device, or link a device in seconds by scanning a QR code from one you're already signed in on. Because you hold the key, your data stays readable only by you throughout.
Finances only you can read
Create your free account and keep your money private by design — local-first, encrypted, and readable only by you. The core app is free forever.