You unlocked your phone with your face. Paid for coffee with a tap. Sent a message that says it's "end-to-end encrypted." Checked your bank without typing a password. Behind every one of those ordinary moments lies one of the greatest intellectual achievements in human history.
Yet very few people understand how it works—or why it matters.
Every secure digital interaction depends on one simple question:
Who holds the key?
The answer determines who can read your messages, access your money, recover your data—or steal your identity.
Written for curious readers rather than mathematicians, this is the story of the people, ideas and discoveries that quietly made the modern world possible.
No math. No jargon. No paranoia. Just clear answers to the questions everyone quietly wonders about:
Can WhatsApp really not read my messages?
Where does my Face ID data go — and is it safe?
Isn't keeping every password in one app insane?
What am I agreeing to when my wallet says "Sign"?
Will quantum computers break everything? When should I worry?
What happens to my crypto, accounts, and photos when I die?
This book answers the questions that help you decide amongst the bewildering array of options that are forced upon everyday people all the time — primarily by platforms. Which messaging app to use, should you use a passkey or a password, which encryption options to turn on, back up your data to the cloud or not. Most often the defaults don’t protect your privacy, but rather leave your data open to harvesting. By understanding some key concepts drawn from the world of cryptography, you will make better decisions for you and your family. I hope you enjoy this exploration.
Along the way you'll meet the true stories the headlines got wrong: the $1.5 billion theft where nobody stole the keys — the screen lied. The password-manager breach where the encryption held but the victims lost fortunes anyway. The exchange collapse that taught a million people their balances were promises. The government that ordered a backdoor — and the company that switched off its own strongest feature rather than build one.
The whole book rests on four plain ideas — keys, who holds them, signing, and where keys live — and one master question you'll use for the rest of your life: who holds the key? By the last page you'll judge any app, gadget, or frightening headline for yourself, and you'll know exactly which handful of switches to flip tonight, sorted Good / Better / Paranoid, so you can protect what matters and relax about the rest.
Written for the everyday reader — the one who taps, swipes, messages, banks, and wonders. If you can lock a front door, you can understand the locks that now guard your money, your memories, and your voice. In a world increasingly run by locks you cannot see, knowing even a little about how they work puts the power back where it belongs: with you.
Wasim Ahmad is a co-founder of Vault12, the pioneer of crypto inheritance and a speaker on crypto security and regulation.
Wasim Ahmad has spent decades where this book lives: at the exact point where deep, difficult technology meets everyday people.
It started early. As a schoolboy in Britain in the 1970s, he was among the first children to learn Prolog, the artificial intelligence language. He went on to the University of Sussex to study Mathematical Physics, then switched to Physics and French so he could spend a year in Paris — an early sign of a career that would keep crossing between the technical and the human. After university, he was an astronaut candidate with the Juno Project, but was too young to be allowed into space.
In the 1990s he joined Synon, the British startup whose software-based code generation won the Queen’s Award for Technology, moving with the company to Marin County, California. Then came the chapter that runs through the heart of Who Holds the Key? : as a founding member of Voltage Security, a Stanford University spinout, he launched the first commercial email encryption built on Identity-Based Encryption — the first genuine breakthrough in public-key cryptography in thirty years — working alongside some of the world’s most renowned cryptographers, including Stanford’s Dan Boneh. When catastrophic breaches hit the payments industry, he helped launch end-to-end protection for the world’s payment systems using format-preserving encryption, the elegant technique readers meet in Chapter 4.
His crypto journey began with AlphaPoint, working with the founding team that launched some of the world’s first cryptocurrency trading exchanges. He then joined Vault12, the pioneer of crypto inheritance, where the mathematics of Adi Shamir’s Secret Sharing — the scheme at the center of this book’s chapters on backup and inheritance — became a product that lets people pass their digital assets safely to the ones they love.
Most recently, he has been lobbying hard in both the United States and the United Kingdom — engaging with the SEC, CFTC and the FCA — to evolve the laws and regulations governing crypto, so that everyday people can access these technologies safely and confidently.
The pattern across all of it is the same one that drives this book: taking complex technology and formidable algorithms, and shaping them into solutions that ordinary people can trust, understand, and use.
Wasim lives in London and New York.