Skip to content
Skip to content

Encrypted folders

Folders that
lock themselves

Real folders with encrypted names. Give any one its own password, a second lock that holds even when the vault is open.

Start freeRead the docs
Folder tree
Vault unlocked
My Vault
root
Projects
12 items
Photos 2026
248 items
Tax & legal
sealed
Password
··········
password required

The vault is open, but Tax & legal stays sealed until you enter its own password.

Structure that keeps secrets

The folders you expect, plus a second layer of encryption you can drop onto any one of them, all the way down.

  • Real, nestable folders

    Build the hierarchy you actually think in: folders inside folders, as deep as you need. Not tags pretending to be structure.

  • Encrypted folder names

    Every folder name is encrypted on your device. The server stores opaque ciphertext. It never learns what you called anything.

  • A password per folder

    Give any folder its own password, separate from your vault passphrase. It guards the most sensitive corners on its own terms.

  • Sealed independently

    A protected folder stays locked even while the rest of your vault is open. Unlocking your vault is not the same as unlocking it.

  • Automatic re-keying

    Move a file into or out of a protected folder and it is re-encrypted under the right key automatically. No manual steps, no leaks.

  • Verified locally

    The folder password is checked on your device against the folder's own key material, never sent to the server, never round-tripped.

A lock within the lock

A key the server never sees

When you protect a folder, its files are re-encrypted under a key derived from a password only you know. That password is verified locally against the folder's own key material. It never travels to the server, and neither does the key it unlocks. Move a file in or out and zcrypt re-keys it for you, so nothing is ever left under the wrong lock.

  • Folder password derived to a key on your device
  • Verified locally, no server round-trip, no guess oracle
  • Stays sealed even while your vault is unlocked
  • Files re-encrypted automatically when moved in or out
How folder encryption works
// unlocking a protected folder
on device password → derive folder key
verify key against sealed marker, locally
folder 7c5b13·f0e2a9·9f2a1c·b8d40e, sealed
server receives: nothing
✓ password never sent. key never sent.

Related

Get started today

Lock the folders that matter most

Free and open source. Organize your drive and lock any folder with a password of its own.

Start free