BURNARDO

Nothing to explain.

Your phone holds more of your life than your home does. Burnardo is built for the moment someone else is holding it — a robbery, a checkpoint, a stranger who knows you carry crypto.

Get notified at launch

Building now. No spam, no newsletter — one email when it ships.

The threat that's actually growing

+75%

rise in physical coercion attacks on crypto holders, 2026

$124M

taken in six months — a twelvefold increase

France

epicentre of a documented wave of kidnappings

They don't break your encryption. They ask you to unlock it, and they're standing next to you.

Security people call it a wrench attack. It's the one threat where every tool on the market has nothing useful to say, because every tool assumes the attacker is somewhere else.

Why destroying your data makes it worse

The obvious answer is a panic button that wipes everything. It's the wrong answer, and dangerously so.

He watches you press it. Now he knows you had something worth destroying, you've given away the only thing you could trade, and you've defied someone who already decided violence was acceptable. Every reason he had to stop just disappeared.

Destruction announces itself. A decoy doesn't.

A wiped phone starts a conversation you can't win. A phone with a small, ordinary, real wallet on it ends the conversation. The goal isn't to defeat him. It's for him to leave believing he won.

What Burnardo does

Decoy

A second passphrase

Opens a real, lived-in, unremarkable vault. Nothing is destroyed. Nothing is refused. Nothing escalates. He gets an answer and goes away.

Travel Mode

Carry less

Before you fly: sensitive data into the vault, local caches cleared, cloud sessions revoked. Then it shows you exactly what an examiner would find.

BurnState™

Zeroize the keys

When you genuinely need it gone: the key hierarchy is destroyed in about 40 milliseconds, offline, from your wrist. The device keeps working. The state doesn't.

Nothing held

No account. No sync.

No telemetry, no cloud copy of your vault, no analytics. There's nothing on our side to subpoena, because there's nothing on our side.

What it can't do

Most security products only tell you the first half. Here's the rest.

It can't erase your iPhone. No third-party app can — Apple provides no such API. Burnardo destroys the keys to its own vault. Anything claiming a one-tap factory reset from an app is misleading you.
It isn't forensic-grade erasure. Zeroizing removes keys from the keychain. Apple's own erase reaches storage that apps cannot touch. We won't pretend those are the same thing.
It can't reach copies that already left. Anything synced to a cloud service is beyond any local tool. That's why Travel Mode revokes sessions rather than just deleting files.
It won't stop a state actor targeting you specifically. If that's your threat model, you need a lawyer, not an app.
Destroying data during a search may be a crime in your jurisdiction. Burnardo is built around minimising and deceiving, not destroying, for exactly this reason.

Get notified

We're building this now. Tell us what you're protecting against and we'll email you once — when it's ready.

What we store: your email address, which option you picked above, and the date. Not your IP address, not your browser, not your location. This page loads no analytics, no tracking pixels and no third-party scripts — open your network tab and check. Your address sits in our own database on our own server; no mailing-list company ever sees it. Reply to any email, or write to privacy@burnardo.com, and we'll delete you on the spot.