Nobody reads your files. Not even us.
Every file is encrypted on your device before it leaves it. We hold the ciphertext and none of the keys — that is maths, not a promise.
Your files are yours alone
End-to-end encryption and a zero-knowledge design mean no one — not even Offkeep — can read what you store.
Everything you need to keep your files private
End-to-end encryption
Every file is encrypted on your device before upload using AES-256. The ciphertext is the only thing that ever touches our servers — we never see your plaintext.
Zero-knowledge architecture
Your encryption keys are derived from your password and never leave your device. Even if our infrastructure were fully compromised, your data would remain unreadable.
No surveillance
We don't scan, index, or analyse your files. No ad targeting, no usage profiling. Your private files stay private — full stop.
Sovereign infrastructure
Your ciphertext lives in data centres with physical access controls, redundant power, and network isolation — and you choose which region holds it when you sign up.
Verifiable integrity
Every file is hashed on upload and re-verified on download. Tampering or corruption is detected automatically and flagged before you open the file.
Secure sharing
Shared links are protected by a random key never sent to our servers — only the recipient with the full link can decrypt the content.
Encryption at every step
Key derivation
Your password is run through a slow, memory-hard KDF (Argon2id). The result is never stored — only a verifier is kept so we can confirm login without ever seeing the key.
Client-side encryption
Before upload, your file is encrypted with a random AES-256-GCM key. That key is then wrapped with your master key and stored alongside the ciphertext.
Secure transfer
Encrypted data travels over TLS 1.3, so even the ciphertext is protected in transit. Because your files are already end-to-end encrypted, a compromised connection still reveals nothing.
At-rest storage
Ciphertext is stored with hardware-level AES-256 encryption at the block level — a second layer of protection even if raw storage were accessed.
Security FAQ
Can Offkeep read my files?
No. Encryption and decryption happen exclusively on your device. We only store ciphertext and have no access to your keys.
What happens if I forget my password?
Because we operate a zero-knowledge model, we cannot reset or recover your master key. We offer an encrypted recovery key you can store offline during sign-up.
Is the encryption code audited?
Our cryptographic implementation is open-source, so anyone can inspect exactly how your data is protected. We are committed to commissioning independent third-party audits and will publish the reports here once they are complete.
How are shared links secured?
Sharing generates a random file key appended to the URL after a #. The fragment never reaches our servers, so we can't decrypt content shared with you.