# Vault Desk

> Zero-knowledge, end-to-end encrypted cloud storage.

Zero-knowledge, end-to-end encrypted cloud storage. Your files and filenames are encrypted on your device, the server only ever sees ciphertext. A private alternative to Google Drive.

## Facts
- Website: https://www.vaultdesk.io
- Pricing: freemium
- Categories: Security & Privacy, Mobile Apps
- LotsDirectory page: https://lots.directory/products/vault-desk
- Listing state: Unclaimed. We listed this product from its public website, and its owner has not claimed it yet.

## Detailed info

## What is Vault Desk?

Vault Desk is a zero-knowledge cloud storage platform with end-to-end encryption for files and documents.

## What Vault Desk does

The platform encrypts files, filenames, and folder structures on the user device before uploading ciphertext to servers. It is built on libsodium using XChaCha20-Poly1305 and Argon2id key derivation. User authentication operates via OPAQUE aPAKE under RFC 9807 without transmitting passwords, while shared files are sealed with X25519 keys, audited via Key Transparency, and decrypted locally across web and mobile clients.

## Who Vault Desk is for

Organizations and people who want private storage with client-side encryption.

## How Vault Desk works

Users create an account to generate local encryption keys and an account recovery code, upload files that encrypt in the browser or mobile app, and share files via encrypted links or public URLs carrying decryption keys in the hash fragment.

## Key features

- Encrypts files and filenames client-side using libsodium and XChaCha20-Poly1305.
- Authenticates logins using the OPAQUE aPAKE protocol without sending passwords to servers.
- Verifies recipient keys through a tamper-evident, append-only Key Transparency log.
- Seals shared files to recipient public keys using X25519 cryptography.
- Public share links keep the decryption key in the link after the hash mark so it never reaches servers.
- Free plan includes 5 GB of encrypted storage, secure sharing, and public links.

## Pricing

As listed on vaultdesk.io, checked 14 October 2026. Prices can change; see the site for current terms.

- Free: $0 per month for 5 GB of encrypted storage, secure sharing, and mobile access.
- Plus: $4 per month for 250 GB of encrypted storage, link expiry, and priority support.
- Team: $15 per month for 1 TB of encrypted storage, shared team spaces, and admin controls.

## Facts from vaultdesk.io, checked 14 October 2026

- Built on libsodium using XChaCha20-Poly1305, Argon2id, and OPAQUE RFC 9807.
- Key Transparency publishes recipient public keys in a tamper-evident, append-only log.
- Stores only ciphertext and wrapped keys on cloud servers.

Written from Vault Desk's own website ([Homepage](https://www.vaultdesk.io/)). The maker can claim this listing to edit it.

## FAQ

### Does the Vault Desk server ever receive unencrypted files or passwords?
No. Files are encrypted client-side before transmission, and OPAQUE authentication verifies logins without sending passwords.

### What cryptographic primitives are used by Vault Desk?
The platform uses libsodium primitives including XChaCha20-Poly1305, OPAQUE under RFC 9807, X25519, Ed25519, and Argon2id.

### How does account recovery work if a password is lost?
A one-time recovery key generated at sign-up unlocks the account and re-wraps encryption keys locally on the device.

### How do public share links keep decryption keys private from the server?
The decryption key lives in the link itself after the hash mark and never reaches the servers.

---
Source: https://lots.directory/products/vault-desk · Machine-readable context by LotsDirectory.