VigsVault encrypts every file with AES-256-GCM the instant it reaches us, then seals that file's key behind your personal RSA-2048 keypair. We only ever store ciphertext — nothing is written to disk unencrypted, ever.
Your session is rotated on every sign-in and fully destroyed on logout — nothing reusable left behind.
Every part of VigsVault is built around one idea: only you should ever be able to see your files. Not a support agent, not a database admin, not us.
Every file gets its own AES-256-GCM key the instant it reaches us, immediately wrapped with your personal RSA-2048 keypair. It's never written to disk unencrypted — no exceptions.
What's stored on our servers is ciphertext and a wrapped key — meaningless without the rest of the chain.
A fingerprint checked automatically every time you open a file.
Every account gets its own RSA-2048 keypair the moment you sign up. Every file's key is wrapped to it — no one else's key unlocks yours.
Unusual access patterns are isolated in real time, day or night.
Encrypted data and its keys are destroyed together, immediately.
The instant your file reaches us, it's encrypted with AES-256-GCM using a key made just for it.
That file's key is wrapped with your personal RSA-2048 public key — locked to your account, and no one else's.
Only the encrypted result is written to disk. The plaintext version never persists anywhere.
When you need it back, it's decrypted just long enough to send it to your authenticated session — then discarded.
Our monitoring layer continuously watches for automated probing and abnormal access patterns. The instant something looks like an intrusion attempt, that session is isolated, the source is flagged, and access is cut — before any real data is ever at risk.
Create your account and watch your first file get encrypted, right in front of you.
Create your vault