Vault Desk

What it does

Vault Desk is a zero-knowledge, end-to-end encrypted cloud storage service. It provides a secure alternative to mainstream cloud drives like Google Drive or Dropbox, ensuring that your files and filenames are encrypted on your device before they ever reach the server. The server only stores ciphertext and wrapped keys, making it impossible for anyone—including Vault Desk itself—to read your data.

Key Features

• End-to-end encryption: Files are encrypted client-side using XChaCha20-Poly1305 before upload. The server stores only ciphertext.
• Passwordless-safe login: Uses the OPAQUE protocol (RFC 9807), so your password never leaves your device, not even in hashed form.
• Secure sharing: Share files with end-to-end encryption; keys are sealed to the recipient's public key. You can revoke access or change roles at any time.
• Public links: Share files with anyone via a link that contains the decryption key after the '#'—the key never reaches the server. You can add passwords and expiration dates.
• Key Transparency: Recipients' public keys are published in a tamper-evident, append-only log, preventing the server from swapping in a key it controls.
• Account recovery: A one-time recovery key allows you to regain access if you forget your password, without the server ever holding your decryption keys.
• Cross-platform: Available as a web app, iOS app, and Android app, all sharing the same auditable crypto core.

Who it is for

Vault Desk is designed for individuals and organizations that prioritize privacy and security. It is ideal for:

• Privacy-conscious individuals who want to keep personal documents, photos, and files away from prying eyes.
• Professionals handling sensitive data, such as legal documents, financial records, or medical information.
• Journalists, activists, or anyone who may be targeted for surveillance.
• Businesses that need to comply with strict data protection regulations and want to ensure their data is not accessible to cloud providers.

Why it matters

In an era of increasing data breaches and surveillance, traditional cloud storage services often have access to your plaintext data. Vault Desk's zero-knowledge architecture ensures that even if the server is compromised, attackers gain nothing but encrypted blobs and wrapped keys. This approach gives users true control over their data, aligning with the principles of privacy by design and data minimization.

Brand and naming

The name "Vault Desk" evokes a sense of security and organization. "Vault" suggests a secure, impenetrable storage space, while "Desk" implies a workspace where you manage your files. The branding is clean and modern, with a focus on transparency and trust. The product line includes Vault Desk Pass (password manager) and Vault Desk Send (file transfer), all built on the same zero-knowledge core, reinforcing the brand's commitment to privacy across multiple use cases.