ScreenShield21 guide

Security model

ScreenShield21 executes protection decisions locally and documents its limits.

Key points

  1. The PC is the authority: it alone decides an unlock.
  2. The Companion supplies a Trusted Device proof that the PC verifies and counts as one family. Phone biometrics do not create a second MFA family; the local Trust Engine decides the unlock.
  3. Neither the password nor credential-engine secrets travel through the pairing protocol.
  4. The channel between PC and phone is sealed with AES-256-GCM and an anti-replay counter.
  5. ScreenShield21 protects access to a session; it is not an antivirus, not a VPN, and not an absolute guarantee.