Vault
Even we can't open it
Vault drops are end-to-end encrypted. Use them for contracts, IDs, medical records, source code or anything that should only be seen by the person you send it to.
- 1
Your browser makes a key
A random 256-bit key is created on your device when you choose Vault.
- 2
Files are encrypted before upload
Each file, its name and its type are encrypted in chunks with AES-256-GCM. We receive only ciphertext.
- 3
The key travels in the link
It sits after the # in the URL. Browsers never send that part to a server, so it never reaches us.
- 4
The recipient's browser decrypts
Opening the link decrypts the files locally. Comments on Vault drops are encrypted the same way.
The part after # never reaches our servers. We store ciphertext we can't read.
- 1Encrypted in your browser
- 2Key stays in the link
- 3Only the recipient can open it
PII Shield caught 2 things before you shared
card ████████████4242 · key sk_live_████████
Security & Vault
Private by default. Unreadable when it matters.
Passcodes, invite-only links, watermarks and expiry come free. Vault drops are end-to-end encrypted with AES-256-GCM in your browser, so not even Slingdrop can open them.
- Malware scanning on every upload
- Burn after reading
- Dynamic watermarks with viewer email
- Isolated content domain
- Audit logs for teams
- GDPR export and deletion
Good to know
- Anyone with the full link can open the drop, so share it the way you'd share a key. Add a passcode to wrap the key for extra protection.
- If you lose the link, we can't recover the files. That's the point.
- Previews are generated in the recipient's browser, so very large files open more slowly than normal drops.
- AI features, server-side previews and malware scanning don't run on Vault drops, because we can't read them.
- Vault needs a free account with a verified email.