Vault
An encrypted cloud drive. Files and folder names are encrypted on your device before upload.
- Client-side encryption for every file
- Expiring, password-locked share links
- Automatic EXIF and document metadata removal
Zero-knowledge privacy suite
Your digital life, confidential.
Encrypted storage, mail aliases and private messaging built for journalists, sources, security teams and anyone done with the surveillance economy. Your data is locked on your device before it leaves. We hold ciphertext and nothing else.
01 Built for privacy
Encryption and decryption happen only on your devices. Our servers never see a key, a password or a plaintext file.
02 Secured by math
Audited, standard cryptography (AES-256-GCM, modern key exchange). No homemade ciphers, no trust-us promises.
03 Hidden by default
Metadata stripped on upload, aliases instead of your real address, minimal logs. What happens on Yakhfa stays hidden.
Zero-knowledge, in 10 seconds
What you type vs. what our server gets.
This demo runs entirely in your browser using the Web Crypto API. Your passphrase stretches into a 256-bit key (PBKDF2, 310,000 rounds), then AES-GCM encrypts the message. Nothing is sent anywhere.
Yakhfa server · what we store
…
AlgorithmAES-256-GCM
Salt…
IV…
Key on servernone
Demonstration only. The product will use the same principle with full key management and independent audits.
The suite
Three tools. One key, held by you.
Alias
Burner addresses that forward to your real inbox, so no site ever learns it.
- One alias per site; kill any alias in one tap
- Pseudonymous sign-in with no real name required
- Tracker pixels stripped from forwarded mail
Whisper
End-to-end encrypted messaging for sources and teams, with no phone number required.
- Disappearing messages by default
- Minimal metadata kept on our side
- Safety numbers to verify who you’re talking to
Metadata stripping
A photo says more than you meant it to.
Most phone photos carry hidden EXIF fields: where you stood, when, and on what device. Vault removes them before the file is encrypted, so even a recipient you trust gets only the picture.
FieldAfter Vault upload
GPS latitude / longituderemoved
Date & time takenremoved
Camera make & modelremoved
Device serial numberremoved
Editing softwareremoved
Image pixelskept
Plans
Free to start. Paid to go further.
Every plan gets the same encryption. Paid plans add space, aliases and team features. Prices will be announced at launch.
Free
Shield
Free forever
- Encrypted Vault storage (starter quota)
- A handful of aliases
- Whisper messaging
Recommended
Shield Plus
Monthly or yearly · pricing at launch
- Large Vault storage
- Unlimited aliases and a custom domain
- Priority support
Teams
Shield Newsroom
Per seat · pricing at launch
- Shared encrypted vaults
- Secure intake for sources
- Admin controls without admin access to content
Early access
Get in before launch.
We’ll email you once when the beta opens. Your address is used for that and nothing else.