A passport scan for a family member. Personal photos for your partner. Documents for someone helping you move. Share the files they need without giving them the pattern or recovery key to your own vault.
A separate key for every share
Revault creates a new share key and secret on your device. By default, it wraps only the selected file-version keys under that share key and transfers their existing encrypted contents. This avoids re-encrypting large files while keeping your vault master key private. Extra isolation can create fresh encrypted file contents when you choose it.
One invitation, a private secret
Send the invitation link to your recipient, then pass the decryption secret through a separate private channel. The link opens Revault’s shared-vault flow. Recipients enter that secret, without your personal pattern or a Revault account, and see an isolated shared vault.
Choose the right sharing route
Controlled shares use Revault’s server on both platforms, including iPhone-to-iPhone when you need access limits or expiry. iOS also offers private, read-only CloudKit invitations between Apple accounts. Those CloudKit invitations do not enforce access counts or automatic expiry.
Share a snapshot, keep your private organization
Recipients receive the files captured when you create the share. Later edits to your source vault are not synced into it. Folder membership, tags, and favourite status are omitted from the shared file metadata. Deleting the original file does not revoke the separate share; manage the invitation itself.
How to share with Revault
Unlock your vault and select the files or vault snapshot you want to share.
Choose access limits, an expiry, export permission, and an optional timer after first access.
Send the invitation link and deliver its decryption secret separately to the intended recipient.
Your vault pattern, recovery key, and vault master key are never included in a share. The service receives encrypted file data and operational metadata such as sizes, checksums, timestamps, and access-session counts. The separate decryption secret is not uploaded.