What are you protecting?
Text or any file up to 100 MB.
0 characters
Anyone who holds the file can read this. Don't write what's inside it.
Encrypt
Seal something only you can open.
Lock away a secret, then choose who can open it. It's encrypted right here on your device. Nobody else can read it, not even us.
Re-keying . Sealing creates a brand-new key and new shards. Afterwards you'll be offered to delete the old copy, so the old shards stop working.
Who can open it?
Not sure? "Trusted people" is what most people choose.
Require shards and passphrase togetherTwo-factor: stolen shards alone are useless, and so is a leaked passphrase. When off, either one opens the vault.
Use 4+ random words or a generated passphrase.
There's no reset. Write it down somewhere safe, because a forgotten passphrase can't be recovered by anyone.
Where should it be kept?
Only the locked version is saved. Your keys stay with you.
Decrypt
Open a vault.
Load the vault, then add its keys. Typos and fake keys are caught automatically.
The vault
A .vault file, or a record you saved earlier.
or choose a saved record
Your keys
Shards, a passphrase, or whichever this vault accepts.
0
No shards yet
Drop .key files or paste shards below.
or
or
Vault opened
Records
Your vault.
Encrypted records. Without their keys these are indistinguishable from noise.
Nothing here yet
Sealed vaults saved to this device appear here.
Recovery drill
Test your shards.
Make sure your keys still work before the day you need them. Nothing gets decrypted, and you don't need the vault itself.
Waiting for shards
Results appear here as you add shards.
Legacy · Pro
If something happens to you, the right people find out.
Just keep using the app. If you go quiet for longer than you choose, your trustees get your message, links to your encrypted vaults and, optionally, one escrowed shard. We never hold enough to open anything.
- You check inOpening the app while signed in counts. So does one click in a reminder email.
- You go quietAfter 90 days without a check-in, you get weekly reminders.
- Grace period14 more days to respond.
- ReleaseTrustees receive everything you prepared. A lapsed subscription never blocks this.
Your plan stays armed and will still be delivered. Renew Pro to change it.
Trustees
Up to 10 people. They're contacted only on release.
Timing
How long you can be silent before anything happens.
What they receive
Instructions, vault files and, optionally, one shard.
0/5000 · Stored readable by the service so it can be delivered. Say who holds the keys, never the keys themselves.
Trustees get download links that expire after 30 days. The files stay encrypted.
Useful when a trustee holds the other shards but not quite enough. One shard alone can't open anything.
Control
Settings.
Air-gap mode
Blocks every network request from this tab with a browser-enforced Content Security Policy. Once on, it can't be undone without reloading. Cloud features turn off.
Appearance
Light paper or black paper. "System" follows your device.
Account
Sign in to keep vaults in sync across your devices and to use Legacy. Your account can't open your vaults. Only your keys can.
Signed in as
Deleting removes your cloud vaults, Legacy plan and plan record. Vaults saved on your devices or Google Drive are untouched.
Google Drive
Keep encrypted vaults in your own Google Drive, in a folder called "Zero-Trust Vault". Google only ever stores locked files, and this app can only see the files it created there.
Plan
Free- Unlimited encrypted cloud vaults (Free: 2)
- Legacy: dead man's switch for up to 10 trustees
- Everything else stays free, forever. Opening a vault never needs a plan.
Offline app
Download this whole app as a single HTML file that runs with no network and no server. Keep it with your shards: if this website ever goes away, your vaults will still open. For the strongest guarantee, seal with this file instead of the website, after checking its published fingerprint.
Each GitHub release also publishes a local-only build with its SHA-256, so you can verify exactly what you're running.
This device
Passkey
Use Touch ID, Face ID, Windows Hello, your phone or a security key as a vault key. The WebAuthn PRF extension derives a secret inside the authenticator. It never leaves the hardware, and each vault uses its own salt.
Engine
How it works
- GenerateA random 256-bit data key is created in an isolated worker, from the OS's secure random generator.
- EncryptYour data, file name and type are padded and sealed with AES-256-GCM. The header is authenticated too.
- SlotEach unlock method wraps the data key in its own key slot: Shamir shards, Argon2id passphrase, both together, or a hardware passkey.
- ForgetKeys are wiped. Only a slot's key material, held by you, can bring them back.
No public-key cryptography is used, so a future quantum computer has nothing to attack beyond brute force against AES-256. File format, threat model and limits are in the repository's README and SECURITY.md.