Your Non-public keys are stored offline on a CC EAL5+ Licensed chip. The machine can then hook up with a smartphone by way of Bluetooth or to a computer by using USB. Although the approvals are sent between the hardware machine plus your on the web device, your true private waiting for link from Web 2.0 Blogs (22)