Your files. Your keys.
Vault encrypts every file, and its name, in your browser before it leaves your device. We store data we can't read. Without your passphrase, nobody can open it, including us.
- Encrypted in your browser
- AES-256-GCM
- File names encrypted too
- We can't read your files
Encryption even we can't undo
Your passphrase never leaves your device, so the key to your files never reaches us.
Set a passphrase
Your encryption key is derived from it with PBKDF2 and 100,000 iterations, in your browser.
Files encrypt locally
Each file is encrypted with AES-256-GCM before upload. The original never touches our servers.
Stored encrypted, twice
The encrypted file is kept on storage with its own server-side encryption on top.
Decrypt on download
It streams back to your browser and decrypts there with your passphrase.
Private by design, not by promise
Zero-knowledge
We hold only encrypted data. Without your passphrase it's meaningless, to us and to anyone who gets hold of it.
AES-256-GCM
256-bit keys and authenticated encryption, so any tampering with a file is detected.
Direct upload
Files go straight from your browser to encrypted storage, never through our application servers.
Secure sharing
Password-protected links with download limits and expiry times. Recipients don't need an account.
Play, stream and cast
Choose to store a video unencrypted and it plays in the browser or casts with Chromecast or AirPlay. Encryption stays on unless you switch it off.
Folders and stars
Organise files into folders and star the ones you need often, in a file manager built into your dashboard.
If you go quiet, your vault acts for you
If you don't sign in for a period you choose, Vault either destroys every file or hands them to someone you trust. Built for journalists protecting sources, activists in hostile places, and anyone who needs a failsafe.
- From 7 days to a year of inactivity. Every sign-in resets it.
- Destroy or share. A trusted contact gets download links, and still needs your passphrase.
- A warning first. An email 7 days before, and one click on "I'm still here" resets it.
Protection for when things go wrong
Geo-destruction rules
Choose the countries your vault can be opened from. A sign-in from anywhere else locks or destroys your files automatically.
Timed file expiry
Give any file a destruction date. When it arrives, the file is permanently wiped from storage, not just hidden.
Encrypted file names
Names are encrypted on your device too. We don't just protect your files, we don't know what they're called.
What we can see, and what we never can
What we can see
- File sizes
- Upload and download times
- Your account and how much storage you use
What we can never see
- What's in your files
- What your files are called
- Your passphrase or encryption keys
- Your data, decrypted, at any point
The flip side: forget your passphrase and nobody can recover your files. That's what zero-knowledge means.
Start free, upgrade for space
Vault Pro
For individuals
or $49.99/year · save 17%
- 50 GB encrypted storage
- Files up to 500 MB
- 25 share links
- Zero-knowledge, AES-256-GCM
- Video playback, streaming and casting
Vault Business
For teams and professionals
or $129.99/year · save 17%
- 500 GB encrypted storage
- Files up to 2 GB
- 100 share links
- Zero-knowledge, AES-256-GCM
- Video playback, streaming and casting
- Priority support
Prices in USD · Cancel any time
Questions
What if I forget my passphrase?
Your files can't be recovered. We never store your passphrase or your keys, so nobody, including us, can decrypt your files without it. Keep it somewhere safe, such as a password manager.
Can PremierVPN staff see my files?
No. Files and their names are encrypted in your browser before upload, so all we hold is encrypted data. We can see file sizes, upload and download times, and how much of your storage you've used.
How does sharing work?
Create a link with a password, a download limit and an expiry time. The recipient doesn't need an account. Encrypted files decrypt in their browser with the passphrase you share separately.
Can I play videos from my Vault?
Yes, if you choose. Encryption is on by default; for any video you can turn it off so it plays in the browser, streams from a share link and casts to a TV with Chromecast or AirPlay. You decide file by file.
What's included with my VPN plan?
1 GB comes with every PremierVPN plan, Premium VPN includes 10 GB, and Business VPN and the Complete bundle include Vault Pro.
What happens when the dead man's switch triggers?
Whatever you chose: your files are permanently destroyed, or your trusted contact receives download links. They still need your passphrase to decrypt. You get an email warning 7 days before, and signing in resets the timer.
Store files the way they should be stored
If a service can read your files, so can anyone who breaks into it. With Vault, there's nothing readable to take.