RevaultShare files that stop working on a deadline. Set an expiry, limit access sessions and add a timer after first open. Recipients need the app, no account.
Download RevaultSecurity modelRevault lets you share encrypted files that stop working at a deadline you choose, within 30 days, with an optional cap on access sessions and a timer that starts at first access. Your recipient needs the Revault app and the separate secret you send them, but not a Revault account or vault of their own. On desktop, the invitation page provides a QR code to continue in the mobile app.
Yes, for a controlled share. The recipient opens the invitation in Revault and enters the secret you send them separately. They do not need a Revault account, a personal vault or a pattern, and their own vaults stay locked while the shared vault is open.
A desktop visitor can scan the invitation page’s QR code with their phone. If Revault is not installed, use the download destination first and then reopen the invitation. The sender still needs to communicate the decryption secret privately; a QR code does not supply it.
Choose an expiry within 30 days when creating a controlled share. The service stops granting access after that deadline whether anyone has opened it or not. You can also revoke the share earlier. These controls apply to the shared snapshot, not the files in your personal vault.
The optional self-destruction timer starts when the server first grants an access session, before successful decryption is confirmed. All recipients share the same deadline. Reopening does not reset it, and the earlier of this deadline and the original expiry ends access.
Set a maximum number of access sessions or leave sessions unlimited until expiry. The server counts granted sessions, rather than individual file views or identified recipients. Retrying with the same valid session token does not consume another access. A session lasts at most 15 minutes and never beyond the share’s deadline.
Allow recipients to save an encrypted .qvault copy, or disable the app’s export actions for a temporary viewing flow. Exported copies open with the share secret and can remain usable after the invitation expires. Disabling export also enables supported capture safeguards: Android secure windows block screenshots and recordings; iOS hides recordings and closes after screenshots, which it cannot prevent. An external camera or modified client can still retain visible information.
Your vault pattern, recovery key, and vault master key are never included in a share. The service receives encrypted file data and operational metadata such as sizes, checksums, timestamps, and access-session counts. The separate decryption secret is not uploaded.
Expiry and revocation stop future retrieval through Revault. They cannot erase screenshots, exported files, or copies retained by a recipient. Choose someone you trust, even when export is disabled.
Fixed expiry answers when new access must stop, whether or not the share was opened. An access limit answers how many sessions the server may grant. The first-access timer answers how long the shared snapshot remains available after the first session is granted. Combine them for the actual task: the earliest applicable deadline ends access, and reopening does not restart the first-access timer.
A granted session is not a verified person or one view of each file. A recipient may need to return after switching apps, losing connectivity or finishing an initial preview. A one-session allowance can therefore be less forgiving than expected. The first-access timer also starts before successful decryption is confirmed. Explain the secret and opening steps clearly before sending a tightly limited invitation.
A recipient can collect a document any time before tomorrow, but should only view the snapshot briefly after opening. Set a fixed deadline for tomorrow and add a first-access duration that fits the review. Decide separately whether an encrypted export is appropriate. If they need an enduring record, disabling export and choosing a short timer may conflict with the task; agree on the intended outcome first.
Yes. Cross-platform shares use Revault’s server, with an expiry and optional access-session limits. Between iPhones you can also send a private, read-only CloudKit invitation, which has no automatic expiry or access counts.
A controlled share can last up to 30 days. An optional first-access timer can end it sooner, and the owner can revoke the invitation before either deadline.
No. A share is a separate snapshot, so removing the original file does not revoke it. Revoke the invitation itself when access should end.
The service receives encrypted file data and operational metadata such as sizes, checksums, timestamps and access-session counts. Your vault pattern, recovery key and vault master key are never included in a share, and the separate decryption secret is never uploaded.
The server sharing service currently accepts snapshots with up to 1 GiB of file content. That capacity does not limit the files in your own vault.
No. An invitation is a capability: anyone holding the link and the secret can use an available session. Use separate invitations when different recipients need their own deadlines or counters.
No. It begins when the service first grants access, before decryption success is known. A wrong secret or interrupted transfer can therefore use time. Later opens share the same deadline rather than starting a new timer.
No. Expiry and revocation govern retrieval through the controlled service. A recipient’s earlier export, screenshot, external-camera photo or other retained copy cannot be remotely erased by that deadline.
The invitation’s limits are shared, including its first-access deadline. Create separate invitations when recipients need different opening windows, session counts or the ability to revoke one person’s future access independently.
Choose the settings that fit your files, and keep a recovery plan before you rely on a single device.
Download RevaultShare encrypted files or a vault snapshot with a separate secret. Keep your personal vault keys private across iOS and Android.
Share files that stop working on a deadline. Set an expiry, limit access sessions and add a timer after first open. Recipients need the app, no account.