Drop in any file and a passphrase. Encryption runs entirely on this device with AES-256 — nothing is uploaded, and no copy is kept.
DROP FILES
Drag files here, or click to choose
Any type, any size. They never leave this page.
Done
Sharing safely
Send the .vault file over any channel you like — it's useless without the passphrase. Then send the passphrase separately through a freekingdom.ca DM, where burn-on-read keeps the key from lingering. Keeping the file and the key on different channels is what makes this secure — never put both in the same message.
How it works
AES-256-GCM encrypts and authenticates the data, so any altered byte is caught on decryption.
Your passphrase becomes a key via Argon2id, a memory-hard function that resists GPU and ASIC cracking, with a fresh random salt per file. (Falls back to PBKDF2-SHA-256 at 600k rounds if the Argon2 library can't load.)
Files are processed in 1 MB chunks, each with its own nonce and bound to its position — chunks can't be reordered or trimmed.
The original filename is encrypted too; a .vault file reveals nothing about its contents.
Everything happens locally, and once loaded the app works offline — no network, no storage, no accounts.
⚠ There's no passphrase recovery. Lose the passphrase and the files stay locked forever.