Encrypted Vault is PremierVPN's file storage, built so that files are encrypted in your browser before they're uploaded. This guide explains how it works, who has it, and how to set your passphrase and start using it.
How Encrypted Vault works
- You set a vault passphrase. Your browser turns it into a 256-bit encryption key (using PBKDF2-SHA256 with 100,000 rounds). The passphrase and the key stay in your browser and are never sent to us.
- You upload a file. Your browser encrypts it with AES-256-GCM, encrypts its name with the same key, then sends the encrypted file directly to our storage. The file itself doesn't pass through our web servers.
- You download a file. Your browser fetches the encrypted file from storage and decrypts it, and its name, on your device with your passphrase.
Because we never have your passphrase, we can't read the contents or names of your encrypted files, and we can't recover them for you.
Some information isn't encrypted: folder names, file types, sizes and dates are stored in readable form so the vault can list and manage your files. Keep folder names neutral. Names of files uploaded from a PremierVPN app, and of a few very old files, stay readable until you rename them in the vault. See What Vault Encrypts for the full list.
You can also choose to upload a file without encryption so it can play in the browser. Those files, and their names, aren't protected by your passphrase. See Uploading and Downloading Files.
Who has Encrypted Vault
- Included with some VPN plans: Premium VPN, Business VPN and PremierVPN Complete include Vault access. Your storage allowance is shown at the top of your vault.
- Standalone plans: Vault Pro and Vault Business can be added to any account.
| Plan | Storage | Largest file | Working share links at a time |
|---|---|---|---|
| Vault Pro | 50 GB | 500 MB | 25 |
| Vault Business | 500 GB | 2 GB | 100 |
For current prices, see the Vault plans page.
Set up your vault
- Sign in to the portal at portal.premiervpn.net.
- Click Vault in the sidebar.
- If Vault isn't part of your plan yet, you'll see the available plans. Click Get Vault Pro or Get Vault Business and complete checkout.
- On the Set your vault passphrase screen, enter a passphrase of at least 8 characters (longer is much better) in Vault passphrase, or click Suggest a strong passphrase. Enter it again in Type it again.
- Tick I've saved my passphrase somewhere safe. I understand PremierVPN can't recover it.
- Click Set passphrase and unlock.
- Your vault opens. Click Upload, or drag files onto the page, to add your first file.
Next time, enter your passphrase and click Unlock vault. The vault stays unlocked in that browser tab until you click Lock or close the tab.
Choose your passphrase carefully. It can't be changed later, and if you forget it, nobody, including PremierVPN staff, can recover your encrypted files. Store it in a password manager.
For more advice, see Vault Security Best Practices.