Vault Desk

Vault Desk is an end-to-end encrypted cloud drive where all cryptography runs on the client. Files are encrypted with XChaCha20-Poly1305 in your browser or app before upload, so the server only ever stores ciphertext and wrapped keys— filenames included.Login uses OPAQUE (RFC 9807), so your password is never sent to the server, not even as a hash.

Sharing seals each file key to the recipient's public key, and those public keys are published in a tamper-evident, append-only Key Transparency log so a compromised server can't silently substitute its own key. Public links keep the decryption key in the URL fragment, so it never reaches the servers; password protection and expiry can be added.Lost your password? A one-time recovery key issued at sign-up re-wraps your keys locally, without Vault Desk ever holding them.

The threat model assumes full server compromise: an attacker who steals the entire database gets encrypted blobs and wrapped keys, which are useless without your password. Web, iOS, and Android share one small libsodium-based crypto core, so encryption behaves identically across platforms. The stack can also be self-hosted.

Key features

-> Client-side encryption with XChaCha20-Poly1305; server stores ->ciphertext only ->OPAQUE authentication — password never leaves the device ->Encrypted filenames and metadata ->Sealed sharing (X25519) with revocable access and role changes ->Public links with password + expiry; key stays in the URL fragment ->Key Transparency log to detect substituted keys ->One-time recovery key for account recovery ->Web app (Next.js/React) plus iOS and Android apps ->Auditable crypto core built on libsodium ->Self-hostable