What is Vault Desk?

Most "secure" cloud storage encrypts your files with keys the provider also holds. That's a lock whose spare key sits in someone else's pocket — and it means a breach, a subpoena or an automated moderation decision can reach your data. Vault Desk is built the other way round. Your password is put through Argon2id on your device to derive your keys, and every file is encrypted with XChaCha20-Poly1305 in the browser or app before upload. Filenames and folder structure are encrypted too, so the server sees a list of anonymous blobs rather than an index of your life. Login uses OPAQUE (RFC 9807), an augmented PAKE that proves you know your password without ever transmitting it — so there's no password database to breach. Sharing seals a file's key to the recipient's X25519 public key, and those public keys are published in a tamper-evident Key Transparency log, so a server can't quietly substitute a key it controls. Public links keep the decryption key in the URL fragment, which never reaches our servers. The threat model assumes the server can be compromised. An attacker who steals the entire database gets encrypted blobs and wrapped keys, which are useless without a password that was never sent. You can also self-host the whole stack. Free tier: 5GB, with the same encryption as every paid plan.