Vault, built into Nemi

The safest place for a file is one only you can open.

Encrypted in your browser, under a key we have never held. We cannot open it for anybody, not even when we are asked to.

A vault folder open in Nemi, with the line: Open in this tab. Names and contents are decrypted here and nowhere else.

Watch it lock. In your browser, right now.

This is not an animation of encryption. Type something and lock it: a key is made in this tab, what you typed is encrypted with it, and the line of letters is what a server would hold. A vault does exactly this to every file and every file name, before anything leaves your device.

Passport, Sanne de Vries.pdf

Making a key in this tab.

Same folder. Two very different views.

On the left, the vault open in its owner's tab. On the right, the same folder for anybody without the key: no names, no count, no sizes. Drag the handle.

The same vault folder locked: Nemi shows that it is locked and nothing about what is inside.
A vault folder open in Nemi: file names readable, with Add files, Members and Lock.
With your keyWithout it

How it works. Vault in three steps.

1.

Make a vault key

With a passkey, or a long passphrase. It is made on your device, and you get a recovery code to keep somewhere else.

2.

Turn an empty folder into a vault

One button, in the folder. From then on everything put in it is encrypted before it leaves you, names included.

3.

Open it when you need it

It opens in the tab you unlock it in, and closes with it. Add the people who may open it, from a device that already can.

The fine print, in large type.

For the contracts, the passports and the things that must never leak. A vault folder is encrypted in your browser under a key generated on your device, which we have never held. Contents and file names are ciphertext to us, and we cannot decrypt them for anybody, including in response to a legal request.

  1. 01

    The key never reaches us in usable form

    It is unlocked by a passkey or a passphrase on your device. What we store is the wrapped version, which is meaningless without the thing that unwraps it.

  2. 02

    Access is granted by a member, not by us

    Adding somebody re-encrypts the key to them on an existing member's device. We route the result and cannot add ourselves to it.

  3. 03

    A second lock, so a lost passkey is not the end

    The same key is wrapped again under a recovery code shown once at setup. It is a second lock on the same door, not a back door: we hold only ciphertext, and the code never reaches us.

Move in once. Cancel the rest.

Nemi is opening in groups. Put your name down once and every tool on this page comes with your account when it is your turn.

15 GB free when you are in. No card.