Skip to content
Skip to content

Privacy tools

Privacy for the

Encryption keeps files unreadable. These tools cover the rest: being pressured to unlock, going quiet, and the edge cases.

Start freeRead the docs

Zero-knowledge by design. We never hold your keys or your plaintext.

Plausible deniability

A decoy profile for when you're forced to open up

Set a second “decoy” password. When you log in with it, zcrypt opens an innocent-looking vault full of harmless files, not your real one. Under coercion, at a border crossing, or anywhere you can't say no, you can unlock something real-looking without exposing what actually matters.

  • A second decoy password you set yourself, separate from your real one.
  • Logging in with it opens an innocent-looking vault with believable filler files.
  • Nothing in the decoy hints that a real vault exists behind a different password.
How decoy profiles work
Decoy password
budget-2024.xlsx
cat-photos
recipes.txt

Looks ordinary

Real password
source·sealed
ledger·sealed
keys·sealed

Never revealed

If you go quiet

A dead man's switch that reaches a person

Choose a trusted contact and a check-in window. If you don't log in for that long, zcrypt emails them a notification. It's a safety net for journalists, activists, and anyone who needs someone alerted if they suddenly can't check in.

Check-in window7 to 365 days
last login resets it contact notified

What it does

  • Emails a trusted contact you choose if you don't log in for a set window.
  • Timeout is configurable from 7 to 365 days: you decide the check-in cadence.
  • Every login automatically resets the countdown, so normal use keeps it quiet.

What it doesn't do

  • It does not hand over your files.
  • It does not release your passphrase or any keys.
  • It is a heads-up to a person, not an automated handover of access.

Because zcrypt is zero-knowledge, there are no keys for us to hand over, so the switch alerts a person rather than releasing your data.

In beta

Maturing, and honestly labelled

These two are real and usable, but still evolving. We'd rather tell you exactly where they stand than oversell them.

Beta

Snapshots & integrity

Capture a point-in-time manifest of your vault and detect if a stored file has been altered or tampered with since.

Snapshots are manifests for tamper detection, not a restore or version-history system. They don't roll your files back to an earlier state yet.

Read the docs
Beta

Shared vaults

Collaborate in a vault with other people using viewer, editor, and admin roles.

The cryptographic key-sharing behind roles is still maturing. Treat shared vaults as experimental and don't rely on them for high-stakes secrets yet.

Read the docs

It all sits on the same private core

Every one of these tools is bounded by the same promise: your files are encrypted on your device with AES-256-GCM before they leave, and we never see your passphrase or your plaintext. The decoy hides a vault we can't read either way; the dead man's switch notifies a person because there are no keys for us to release. Privacy features that can't betray you, because the architecture won't let them.

How the encryption works

Related

Get started today

Privacy you can actually reason about

Free and open source. Bring a storage account you already own, set a decoy password, and arm your safety net in minutes.

Start free