File Vault
A vault for the documents you'd never email to yourself — encrypted on your device with a passphrase we never see, before a single byte is uploaded. We store sealed boxes we cannot open.
Coming soon
This tool isn’t available just yet — it’s on the way. Meanwhile, explore the other free tools.
Browse all tools0 bytes of your file have left this device. Counted live in this tab, not claimed — open your browser’s Network tab and watch.
How it works
- 1
Create your vault with its own passphrase (separate from your login) and save the one-time recovery key — the only fallback if you forget it.
- 2
Add files: each one is sealed on your device with AES-256 before a single byte leaves it. Even the file names are encrypted.
- 3
Open your vault from any device: unlock with your passphrase, and files decrypt locally as you download them.
Frequently asked questions
Can DiemDesk see my vault files?
No — structurally, not just by policy. Files, file keys and even file names are encrypted on your device before upload; no key material ever exists on our servers. A full copy of our database and disks would yield ciphertext and file sizes, nothing else.
What happens if I forget my vault passphrase?
Your recovery key — the 24-character code shown once at setup — is the only way back in. We cannot reset the passphrase or recover the files, and that is precisely what makes the vault yours alone. Store the recovery key offline.
How is this different from Google Drive or Dropbox?
Mainstream cloud drives encrypt in transit and at rest, but the provider holds the keys — they can read your files, and so can anyone who compels or breaches them. The vault is end-to-end: the key is derived from your passphrase on your device and never leaves it.
What encryption does the vault use?
AES-256-GCM for the files (authenticated, so tampering is detected), with keys derived from your passphrase via Argon2id — a memory-hard function built to resist GPU cracking rigs. Each file has its own random key, wrapped by your master key.
Why is the vault a Pro feature?
Encrypted storage costs real money to keep safe and available — unlike our on-device tools, which stay free. Pro includes 10 GB of vault storage.