The other component of the Two-secret Key Derivation is the Encryption Keys, generated when a user registers a Locker account. While there is only one Master Password, which the user needs to memorize, many Encryption Keys are generated and used in encryption and decryption processes to access and store data on the Locker servers.

Combining the two components, Encryption Keys and Master Password, which have distinctive characteristics but complement each other, ensures a high level of independence as well as security of the data and of the secret keys.

Below is a figure illustrating Encryption Key generation.