Vault Desk

What Vault Desk is

Vault Desk is an end-to-end encrypted drive for uploading, organizing, sharing, and recovering files. Files are encrypted on the user’s device with XChaCha20-Poly1305 before upload; the server stores ciphertext and wrapped keys. OPAQUE authentication lets users sign in without sending a password or its hash. Users can share files with recipients, change roles, revoke access, and create public links with optional passwords and expiry. A tamper-evident, append-only log records recipient public keys to help clients detect substituted keys. Account recovery uses a one-time recovery key. Since Vault Desk does not hold users’ decryption keys, that key is the only backup for restoring access. The service offers a browser app and iOS and Android apps that share the same cryptographic core, and users can self-host the whole stack. The Free plan includes 5 GB of encrypted storage, secure sharing, public links, and web and mobile access. Plus costs $4 a month for 250 GB, password-protected links with expiry, and priority support. Team costs $15 a month for 1 TB, shared team spaces, admin controls, and audit.

Who it suits

Vault Desk suits people who want encrypted file storage with sharing controls across web and mobile. Self-hosting is also an option for users who want to host the whole stack themselves.

Limits

The Free plan is limited to 5 GB of encrypted storage. Plus includes 250 GB, while Team includes 1 TB; account recovery relies on a single one-time key because Vault Desk does not hold decryption keys.

Getting started

1. Visit the Vault Desk website.
2. Choose the Free, Plus, or Team plan.
3. Use the browser app or install the iOS or Android app.
4. Alternatively, self-host the whole stack.
5. Keep the one-time recovery key for account recovery.

Verdict

Vault Desk combines encrypted file storage with flexible recipient and public-link controls. Keep the one-time recovery key safe: it is the sole backup for restoring access.