01
The seal
Files are encrypted in the browser with authenticated AES-GCM before upload. Integrity is checked on decrypt.

Alpha · Desktop betaWe forge the walls. You hold the key..
Verndr Vault
The file is bound on your machine with AES-GCM before it ever travels. We store ciphertext and wrapped keys. You hold the passphrase. What we keep is useless without you.
In the work
01
Files are encrypted in the browser with authenticated AES-GCM before upload. Integrity is checked on decrypt.
02
The vault key is wrapped on-device. We never receive the passphrase, and cannot recover it.
03
The server keeps blobs and wrapped keys — a chest we store, You hold the key.
Also in the house