crycrypt encrypts every file in your browser before anything is uploaded. The key is rebuilt from three ordered keys and an answer only you know, released by codes delivered separately. Our server cannot open your vault.
Encryption active · 0 files read by us
Name ........ Jane Doe
IBAN ........ FR76 3000 6000 0112 3456 7890 189
Income 2025 . €48,210
Tax due ..... €4,210
waiting
Zero knowledge, concretely
What you see
In your browser, once the vault is open.
What we see
On our servers, forever.
No names, no types, no folders, no keys. Just random blobs we cannot open.
Inside your vault
1 item · encrypted in your browser
Premium: folders, the full tree and preview on demand.
Double-click “My Vault”, then the file · right-click for every action, Premium included.
Every file is sealed in your browser before a single byte is uploaded. The server stores blobs it cannot open, and holds no key that would let it try.
Each file gets its own AES-256-GCM key, generated in your browser. What is uploaded is already unreadable, and stays that way on our disks.
Names, types and folder structure are encrypted with the files. The server stores random blobs and one fingerprint — never a key, never a filename.
Your password and factors are turned into keys locally, by Argon2id. The server only ever receives a fingerprint it can check, never anything it could use.
Three ordered keys and your secret answer become one key — the order is enforced by the maths, never compared: out of order, you simply get a different key. Then your codes: the authenticator always, email as you choose. Only then does the server release its share, worthless on its own.
Last Will
PremiumSeal everything that opens your vault in an envelope, encrypted in your browser under a passphrase you hand over in person. We never see the passphrase, nor what is inside.
last sign-in
envelope sealed · waiting
Intrusion trap
PremiumChoose how many failed openings you tolerate, from two to five. Reach it, and the vault is wiped before anything can be read — and the address it came from is banned.
open vault · trap armed at 2 failures
Self-destruct
PremiumChoose a silence, from 30 days to three years. If nobody signs in for that long, the server deletes the account and every file — still encrypted, never read.
Time freeze
PremiumPick a deadline. Your browser re-wraps the file key with an extra share, signs the deadline with the key derived from your factors, then hands that share to the server, which refuses to give it back early. Holding every factor changes nothing: without the share, nothing decrypts.
your vault
freeze · until 1 January 2031
Permanent storage
PremiumPremium includes Arweave, a decentralized network built to keep data for good. Store a file, an image or a web page once: independent nodes around the world keep copies of it, far from the reach of any single jurisdiction, paid for by the network's own currency. It is built to stay online for 50 years and more — long after a hosting contract, a company or a country has changed its mind.
Public means public, forever: a public copy can never be taken down — not by you, not by us. The vault asks you to confirm it in red.
The free plan is not a trial: it keeps the same encryption and the same lock. Paid plans add room, structure and a longer opening window, never a weaker lock.
Free forever
For putting your important documents out of reach.
Billed monthly, in crypto
New here: Permanent storage on Arweave, built to last 50+ years
Priced per agreement
New here: Invoicing and a named contact
Tell us what you store and how much, and we price it.
What people ask before they open a vault.