Vault Desk

What Vault Desk is

Vault Desk is an end-to-end encrypted drive for uploading, organizing, sharing, and recovering files. Its apps encrypt files on the device with XChaCha20-Poly1305 before upload, while the server stores ciphertext and wrapped keys. Sign-in uses OPAQUE authentication, which lets users authenticate without sending a password or password hash to the service. Sharing controls let users change recipient roles or revoke access, and public links can have an optional password and expiry. A tamper-evident, append-only log records recipient public keys to help clients detect substituted keys. Account recovery depends on a one-time recovery key: Vault Desk does not hold users’ decryption keys, so the recovery key is the only backup for restoring access. The service offers a browser app, iOS and Android apps with the same cryptographic core, and the option to self-host the whole stack. The Free plan includes 5 GB of encrypted storage. Plus costs $4 a month for 250 GB, while Team costs $15 a month for 1 TB.