BROWSER · AES-256-GCM · ZERO-KNOWLEDGE / server holds ciphertext only

Open a vault.

The server never sees a key.

Have a share token or full key? auto-detected on paste
No account needed · opens instantly
+ Create a new vault instead
In-browser
AES-256-GCM
Files encrypted before they leave your device.
Keys
Never transmitted
Derived from your passphrase, held only in this tab.
Server stores
Ciphertext only
No filenames, no plaintext, no recovery path.
Identifiers
Daily-salted hash
IPs are hashed; we cannot reverse them.
New here?
Create a vault.
Share a token. That's it.