Privacy & Control

Understanding Intrusion Protection and Crypto-Erase

November 15, 2026 · 4 min read

Learn how GemReader's defense-in-depth security and 3-attempt PIN auto-wipe safeguard your sensitive Locked Libraries against brute-force intrusion.

Why Intrusion Protection Matters

A 4-digit PIN is convenient to enter, but without tamper protection, an unauthorized person with physical possession of your phone could systematically attempt combinations until stumbling onto the correct code.

To make your Locked Libraries truly secure against brute-force probing, GemReader incorporates defense-in-depth intrusion protection. Rather than permitting endless guesswork, the app enforces a strict three-attempt threshold backed by an immediate Crypto-Erase safeguard.

What You'll Need

To understand how intrusion protection functions in practice:

• **Prerequisites**: At least one Locked Library configured with a 4-digit PIN. • **Awareness**: A clear understanding of the three-attempt safeguard and the importance of keeping an offline GemPack backup.

Step-by-Step Instructions

1. When you tap a Locked Library in your collection list, the secure PIN keypad appears. 2. **First Attempt**: If an incorrect PIN is entered, the keypad provides gentle haptic feedback and indicates that two attempts remain. 3. **Second Attempt**: If an incorrect PIN is entered a second time, a prominent amber alert warns you that only one final attempt remains before the vault activates tamper defense. 4. **Third Attempt (Crypto-Erase)**: If a third consecutive incorrect PIN is entered, GemReader triggers an instant **Crypto-Erase**. 5. The unique cryptographic key for that specific vault is permanently purged from memory and storage, rendering the encrypted files unreadable random data to protect your privacy.

Helpful Tips & Common Questions (Librarian's Advice)

• **Isolated Protection**: A Crypto-Erase affects only the specific Locked Library that experienced repeated failed entries. Your main library, other collections, and general settings remain untouched. • **When in Doubt, Step Away**: If you cannot recall your PIN immediately, tap **Cancel** to exit the keypad. Take your time to review your records rather than guessing three times. • **The Value of an Offline Backup**: Because GemReader honors strict zero-knowledge privacy with no central reset servers, forgotten PINs cannot be recovered. Keep a separate, password-protected `.gempack` backup archive stored safely on a personal USB drive or computer.