AES-GCM
Authenticated encryption in the browser. Plaintext files are not uploaded.
Architecture
The browser binds it. We keep only what we cannot read.
We hold ciphertext and wrapped keys — not your passphrase. A chest, not a window.
Files are encrypted in the browser with authenticated AES-GCM before upload. Integrity is checked on decrypt. Vault keys are wrapped with a key derived from your passphrase on your device. We never receive the passphrase.
Server-side storage is ciphertext. We cannot open your files. Account email and operational metadata are still ours to hold. That is not “no data even when compelled.”
Passphrase-wrapped keys
Your passphrase wraps the vault key locally. Losing it means we cannot recover the vault.
What we still hold
Account email, ciphertext blobs, and operational logs. We say this out loud.
What we can honestly say
There is no published third-party audit to download today.
There is no security whitepaper or audit PDF on this site. Report a concern anytime at admin@verndr.com. The web vault is invitation-only Alpha.