Clavem encrypts files and folders locally using password-based encryption with optional content-derived keyfile support. It minimizes metadata exposure, does not reveal authentication methods, and maintains backward-compatible encrypted containers. No cloud, no lock-in — full control and independent access over time.