👋 Hey Hunters! I'm Orestis, the maker behind Vault Desk. It started with an uncomfortable realization: every mainstream cloud drive — Google Drive, Dropbox, iCloud — can read your files. Your data sits on their servers in a form they can decrypt, which means a breach, a rogue employee, or a subpoena can expose it. I've spent years as a backend engineer in payments and security, and I didn't want to build another drive like that. I wanted one where stealing the entire database reveals nothing. So that's Vault Desk: a zero-knowledge, end-to-end encrypted drive. Your files — and even your filenames — are encrypted on your device before a single byte is uploaded. The server only ever stores ciphertext and wrapped keys it has no way to open. Not even I can read your files. A few things I'm proud of: • Files encrypted client-side with libsodium library • OPAQUE login — your password never leaves your device, not even hashed • Sealed sharing — each file's key is sealed to the recipient's public key • Key Transparency — public keys live in a tamper-evident, append-only log, so we can't quietly swap in a key we control • One small, auditable crypto core shared across web, iOS, and Android — and you can self-host the whole stack It's free to start with 5 GB, and the encryption is exactly the same on every plan. I've been building this largely on my own, so I'd genuinely love your honest feedback — especially on the threat model and anything that feels rough. Ask me anything!

Vault Desk

Your files, encrypted before they leave your device.

Your files, encrypted before they leave your device.