selfstore is a local-first storage library for browser apps: an automatic working copy in IndexedDB, portable encrypted ZIP backups, durable homes (a disk file, Google Drive, WebDAV, an S3 bucket) and serverless multi-device sync.https://selfstore.dev/https://selfstore.dev/blog/the-second-tab/https://selfstore.dev/blog/the-second-tab/A server app serialises writes at the database. A local-first app has no such point, and every user eventually opens the app twice. The four ways that goes wrong, and the three browser primitives that fix it.Mon, 24 Aug 2026 00:00:00 GMThttps://selfstore.dev/blog/there-is-no-password-reset/https://selfstore.dev/blog/there-is-no-password-reset/A "forgot password" link is a statement about who holds the key. An app that encrypts on the client cannot offer one - so recovery has to be designed at the moment the password is chosen, not at the moment it is lost.Wed, 19 Aug 2026 00:00:00 GMThttps://selfstore.dev/blog/browser-storage-is-not-durable/https://selfstore.dev/blog/browser-storage-is-not-durable/IndexedDB can be deleted without asking you - under disk pressure, after seven days of Safari inactivity, or with one click in the settings. What an app can actually find out about its own storage, and what it should do with the answer.Thu, 13 Aug 2026 00:00:00 GMThttps://selfstore.dev/blog/leaving-a-local-first-app/https://selfstore.dev/blog/leaving-a-local-first-app/Every app has an export. Almost none of them let you leave. The difference is whether the file is readable without the software that wrote it - and there is a short test that settles it.Sat, 08 Aug 2026 00:00:00 GMThttps://selfstore.dev/blog/schema-migrations-without-a-database/https://selfstore.dev/blog/schema-migrations-without-a-database/Local-first inverts who owns the data, and with it who can run a migration. What replaces the deploy-time script - a read-time upgrade, a version that travels with the file, and a loud refusal in the other direction.Thu, 30 Jul 2026 00:00:00 GMThttps://selfstore.dev/blog/offline-first-interfaces/https://selfstore.dev/blog/offline-first-interfaces/Offline-first deletes most of the UI states a server app needs - spinners, retry toasts, optimistic rollback - and adds three smaller obligations in their place.Sat, 25 Jul 2026 00:00:00 GMThttps://selfstore.dev/blog/indexeddb-as-working-copy/https://selfstore.dev/blog/indexeddb-as-working-copy/A local database as the app's live state - not a server round-trip, not localStorage - and the separation between a working copy and a durable home that makes it safe.Fri, 24 Jul 2026 00:00:00 GMThttps://selfstore.dev/blog/local-first-is-a-security-posture/https://selfstore.dev/blog/local-first-is-a-security-posture/The largest breaches are server-side. Keeping one person's data on their own device removes a whole class of them - and here is exactly which class, and which threats it does not touch.Fri, 24 Jul 2026 00:00:00 GMThttps://selfstore.dev/blog/encrypted-backups-browser/https://selfstore.dev/blog/encrypted-backups-browser/What client-side encryption actually protects against, why AES-256-GCM over Argon2id, and why a format spec beats a vendor promise.Sat, 11 Jul 2026 00:00:00 GMThttps://selfstore.dev/blog/no-backend/https://selfstore.dev/blog/no-backend/An honest decision tree for when a web app actually needs a server - and how far durability, backups and multi-device sync go without one.Sat, 11 Jul 2026 00:00:00 GMThttps://selfstore.dev/blog/sync-without-server/https://selfstore.dev/blog/sync-without-server/Storage-as-mailbox, hybrid logical clocks and per-collection merge strategies - how deterministic convergence works when nobody runs a server.Sat, 11 Jul 2026 00:00:00 GMT