Encrypted file storage

vault.

Encrypted files that give little away.

Vault is a small command-line tool that encrypts files and also hides their names, sizes and timestamps, so a copied vault folder reveals as little as possible.

Status
In development
Interface
Command line
Vault terminal showing example encrypted file commands from the field guide
Adding and listing files from the command line.

What it does

Encrypt files

Add, list and retrieve files in an encrypted folder with a handful of commands.

Hide the metadata

File and folder names, timestamps and exact sizes are hidden, not just the contents.

Optional decoy

A second passphrase can open a separate, harmless set of files.

Clear about its limits

No password reset and no built-in sync. Encryption is not a replacement for backups or a secure computer.

Using it

1

Generate a key

Pick a strong passphrase and keep it safe.

2

Create a vault

Initialise an encrypted storage folder.

3

Add files

They are stored without their original names.

4

Get them back

Decrypt to wherever you choose.

What it protects against

The field guide covers the hybrid post-quantum encryption, the integrity checks and the threat model, including what someone with a copy of the vault can still learn and why you still need backups.

Vault has not been independently audited. Read the threat model before trusting it with anything important.

Vault field guide (PDF)
Vault command-line listing from the user documentation
A vault listing from the field guide.
meet.

Next: Video calls with a shared whiteboard and tools for teaching maths and science.