A photo you love. A scan of a personal document. A note that still means something. These things do not need an audience to be worth keeping. A private space gives them a home without making sharing the default.
Photo
Personal documents
Video
Folders
Folder names and structure are encrypted inside this vault.
Personal documentsPhoto
At home on your devices
Open your encrypted vault online from another device. Keep selected encrypted files in this browser for offline access.
Export encrypted backup
Browser storage can be cleared or evicted. Keep an encrypted backup outside this browser.
.qvault
Up to 1 GiB per file
How bounded encryption chunks make room for files up to 1 GiB without holding the whole file in memory.
1 GiB
Account-free mobile apps
Local-first iOS and Android apps with no Revault account or sign-up.
BROWSER ENCRYPTION
Security, layer by layer.
Your passkey and vault pattern stay separate.
01
Account-free mobile apps
The native apps do not require a Revault account, email address, password, or web sign-in. Vaults are created and encrypted on-device. Local vault use does not upload your files to Revault’s servers.
02
Your vault. Your key.
Your pattern and a random 256-bit secret derive a wrapping key with PBKDF2-SHA256 (600,000 iterations). The secret stays in this browser; the service receives only the encrypted master key.
03
Encrypted before upload
Each vault has a random AES-256-GCM master key. Names and folder structure are encrypted. Files use bounded Tink AES-GCM-HKDF streaming segments, encrypted before upload.
Unlocked only in this browser. Automatically locks when hidden or after 5 minutes of inactivity.Security model
Private from the start
A clear privacy model.
What stays encrypted
Photos, filenames, and previews are encrypted in your browser. The service stores ciphertext.
Folder names and structure are encrypted inside this vault.
What the service can see
Revault encrypts file contents, names, and previews in your browser before uploading them. The service can still observe account associations, object counts, sizes, and timestamps. Encryption does not make every part of using a cloud service invisible.
Safe Exit, when you need it.
Open a designated vault while removing other vaults’ local access. Cloud copies stay intact; unsynced changes can be lost.
Clearing browser data removes the device secret. Sign in with your passkey, then use your recovery key to choose a new pattern.
Your browser assigns a private account ID. Save your passkey in your password manager to sign in on other devices.
What can I open offline?
Open your encrypted vault online from another device. Keep selected encrypted files in this browser for offline access.
Closing or refreshing the tab signs you out. A new tab needs your passkey and a vault pattern before any vault list is shown.
Is a recovery key the same as a backup?
One opens the lock. The other carries your encrypted files. Keep both, in different places.
A recovery kit contains the recovery secret and key wrappers, but it does not contain your files. You still need the encrypted cloud copy or a self-contained encrypted backup.
Encryption protects stored contents. Object counts, sizes, timestamps, and account associations remain visible. A compromised device or frontend can expose unlocked data. Revault is an independent project and has not undergone an independent security audit.
