Zero-knowledge · Self-hosted · Open formats

Your memories, encrypted before they ever leave your device.

A private backup for your photos, videos and files. Military-grade encryption in the browser, storage on Cloudflare R2 for pennies, and a gallery you'll actually enjoy using.

vault.yourdomain.com
October 2026Select

248 photos backed up

31 already stored — no extra space used

AES-256-GCM

per-file keys

600,000

PBKDF2 iterations

$0

egress fees on R2

50 GB

max single file

Everything you need

Pro-grade backup, without the subscription

Built for one owner who cares about privacy, reliability and a polished experience on every device.

End-to-end encrypted

AES-256-GCM in your browser with a key only you hold. The server stores ciphertext — never names, photos or EXIF.

Photo timeline & albums

A fast, beautiful timeline sorted by the date each photo was taken, with albums, favorites and “On this day”.

Smart deduplication

Identical files are stored exactly once. Re-upload your whole camera roll and pay nothing extra.

Versions & trash

Every change keeps a version you can restore. Deleted items wait 30 days in the trash.

Encrypted sharing

Share links with expiry, passwords and view limits. The decryption key lives in the link, never on the server.

Passkeys, 2FA & email codes

Sign in with Face ID or Windows Hello, an authenticator app, or one-time email codes — plus new-device alerts.

Cost dashboard & quotas

See exactly what your storage costs. Set a quota so the bill can never surprise you.

Integrity verification

Weekly server checks plus a one-click deep verify that decrypts and authenticates every file.

Takeout anytime

Export a decrypted copy of everything — folders intact — to a drive. No lock-in, ever.

Zero-knowledge by design

The server is blind. That's the feature.

  1. 1

    Derive

    Your passphrase is stretched with PBKDF2 (600k rounds) on your device to unlock a random master key.

  2. 2

    Encrypt

    Each file gets its own key. Content is split into 4 MiB chunks, each sealed with AES-256-GCM and bound to its position.

  3. 3

    Upload direct

    Ciphertext goes straight from your browser to Cloudflare R2 via short-lived signed URLs — never through the web server.

  4. 4

    Verify

    Every download is authenticated chunk by chunk. Tampering, reordering or truncation is detected and rejected.

Your device passphrase → keys photo.jpg → 🔒 ciphertext plaintext stays here Web server (PHP) accounts · 2FA · signing wrapped keys only cannot decrypt Cloudflare R2 encrypted blobs cannot decryptasksigned URLciphertext,direct

Radically cheap to run

Pay for storage. Nothing else.

Cloudflare R2 charges no egress, so browsing, sharing and restoring your photos costs nothing. Dedup and compact thumbnails keep storage lean.

50 GB of photos & video

$0.60/mo

R2 storage after the free 10 GB · $0 downloads · $0 sharing

Typical family library

250 GB of photos & video

$3.60/mo

R2 storage after the free 10 GB · $0 downloads · $0 sharing

1 TB of photos & video

$15.21/mo

R2 storage after the free 10 GB · $0 downloads · $0 sharing

Estimates at R2 standard storage pricing ($0.015/GB-month). Hosting not included. Built-in quota stops uploads before you exceed your budget.

Questions, answered

Can the server or Cloudflare see my photos?

No. Files, thumbnails, names and metadata are encrypted in your browser before upload with keys derived from your vault passphrase. The server and storage only ever receive ciphertext.

What if I forget my vault passphrase?

Use the recovery key you saved when you created the vault, then set a new passphrase. Without either, nobody — including the operator — can decrypt your data. That is the point.

How much does it cost to run?

Hosting is a basic PHP plan. Storage runs on Cloudflare R2: the first 10 GB is free, then about $0.015 per GB per month, with zero download (egress) fees.

Does it work on my phone?

Yes. It is a responsive, installable web app: add it to your home screen, back up straight from the camera roll or camera, and browse your timeline anywhere.

What happens if the server dies?

Encrypted metadata snapshots are written to R2 nightly. Reinstall, restore the snapshot, and unlock with the same passphrase.

Back up what matters. Keep it yours.

Unlock your vault and start backing up in seconds — from your laptop or straight from your phone's camera.

Open your vault