> completely insecure if you are not the only one with the key
This implies you are referring to a key that the user has.
What key does the user have?
A passcode? Password?