Geo-destruction rules let you list the countries your Encrypted Vault may be opened from. If it's opened from anywhere else, the vault is locked or every file is destroyed. This guide explains how to set rules up safely.
Read this first if you use a VPN. The check uses the IP address you're connecting from. If you're connected to PremierVPN or any other VPN, that's the VPN server's country, not yours. Add the countries of the VPN servers you use, or disconnect the VPN before opening your vault.
Set up geo rules
- Open Vault and click the shield icon at the top (Security Settings).
- Under Geo-Destruction Rules, tick Enable geo-destruction rules.
- Under Allowed countries, tick every country you might open your vault from, including any VPN server countries you use.
- Under Action on violation, choose:
- Lock access (files preserved): the vault won't open, but nothing is deleted.
- Destroy everything permanently: every file and folder in your vault is deleted from storage. This can't be undone.
- Optionally tick Email me on violations to get an email with the country and IP address whenever it's triggered.
- Click Save Geo Rules.
If you enable the rules but don't tick any countries, they have no effect.
The country list doesn't include every country. If you'll be somewhere that isn't listed, you can't allow it: don't use the Destroy action, and expect the vault to lock while you're there (or turn the rules off for that time).
How it works
When you open your vault's main page, we look up the country of your IP address using an IP geolocation service and compare it with your allowed list.
- Allowed country: the vault opens as normal.
- Country not on the list: the action you chose happens straight away, and you see an Access Denied page saying the vault was locked or destroyed.
- Country can't be worked out: the vault opens as normal.
If your vault is locked, open it again from an allowed country, or go to Security Settings and update your country list.
Violation log
If there have been any violations, Security Settings shows the last 10 under Recent Geo Violations, with the country, IP address, how long ago and whether the vault was Locked or Destroyed. If you see one you don't recognise, change your portal password and turn on two-factor authentication. See How to Set Up Two-Factor Authentication (2FA).
Travelling? IP location isn't always accurate, and it's easy to forget a rule is on. Use Lock rather than Destroy unless losing your files would genuinely be better than someone else seeing them, and update your country list before you go.