Everything a cloud drive should be. Nothing it shouldn't.
Full file management, fast sharing, real collaboration — all running on top of a server that never sees your files.
Encrypted before it leaves you
Every file, filename, and share link is encrypted in your browser with client-side cryptography before it touches our servers. Your password never crosses the wire.
Zero knowledge encryption
Files, folder names, and shares are encrypted in your browser with XChaCha20-Poly1305 before upload.
Post quantum ready
Every key wrap runs a hybrid of X25519 and ML-KEM-768. Ciphertext stays private even against an adversary who stores it now and decrypts on a future quantum computer.
Argon2id password derivation
Your password is turned into keys locally with Argon2id (memory-hard) then split with HKDF. Never sent to us.
SRP-6a authentication
Login uses the Secure Remote Password protocol, so we verify you without ever receiving your password.
Forward secrecy per version
Every new version of a file gets a fresh session key. Someone who had access before and cached an old key cannot read newer versions.
Two factor auth (TOTP)
Standard TOTP re-challenged on every unlock, not just on fresh logins.
24 word recovery phrase
BIP39 phrase you hold. Forget your password and this gets you back in. Lose both and nobody can recover your files.
Client side verified
Every download checks its ciphertext integrity in your browser. Tampering is detected before decryption.
Share
Collaborate with teammates or send a one-off link. Either way, the decryption key is wrapped to the recipient and never visible to our servers.
Public share links
Create a link to any file or folder. The decryption key lives in the URL fragment and never touches the server.
Password protected links
Add a password on top of any share link. The password derives a second key locally before decryption.
Collaborator invites
Wrap a file's key to your teammate's public key, peer to peer. No central key server involved.
Folder level permissions
Share a whole folder. Everything inside inherits access through hierarchical keys automatically.
Forward secret revocation
Remove a collaborator and rotate the folder's keys in one step. New content is sealed under fresh keys.
Link expiry & view caps
Time limit a share, cap the view count, or revoke at any time. Links die on schedule without your intervention.
A real drive,
File versioning, trash with recovery, nested folders, client-side search. Everything you expect from a cloud drive — running on opaque ciphertext.
Nested folders
Organize how you like — folders nest as deep as you want with no performance penalty.
Client side search
Search files by name, type, date. Everything runs locally on the decrypted index; the server never sees your query.
File versioning
Previous versions of every file are kept. Revert a mistake or restore an older state without leaving the app.
Trash with 30 day recovery
Deleted files stay in a trash bin for 30 days. One click restores them; one click purges them for good.
Safe file previews
PDFs, images, docs, and spreadsheets render in a sandboxed origin so untrusted bytes never run as app code.
Workspaces
Keep personal, work, and client files in separate workspaces with their own keys. Switch with one click.
Built on open cryptographic standards
Ready to try every one?
Free while in beta. 20 GB included. Every feature on this page is available on every plan.