Nothing to install. Just a tab.
Sign in from any machine, work with your encrypted files, and close the browser with nothing left behind on it.
Your files, from any browser
Sign in at vs3.offkeep.com/console and manage your encrypted storage from any device — no app to install, nothing left behind when you close the tab.
No install required
Open a tab, sign in, and your files are there. Works on any browser, any OS — Chromebooks, library computers, whatever you have.
Drag-and-drop uploads
Upload files and entire folders straight from your browser. Progress is shown in real time; uploads resume automatically if your connection drops.
Instant downloads
Download individual files or package an entire folder as a zip archive — directly from the browser, no native app needed.
Encrypted sharing
Generate a secure share link from any browser. The decryption key is embedded in the link fragment and never reaches our servers — only the recipient can open the file.
Session security
Decryption keys live only in memory for the duration of your session. Close the tab and they are wiped — nothing is cached to disk on the device.
Full file manager
Create folders, rename, move, and delete files — the same operations available in the desktop apps, all without leaving your browser.
From tab open to files ready
Open the web app
Navigate to vs3.offkeep.com/console in any modern browser. No extension, plugin, or download required — the page is all you need.
Sign in securely
Your password is run through Argon2id locally to derive your encryption key. The key is never transmitted — only a login verifier reaches our servers.
Decrypt in the browser
Files are decrypted using the Web Cryptography API built into your browser. All cryptographic operations happen in the tab, not on our servers.
Clean exit
When you close the tab, the session key is wiped from memory and the worker context is torn down. No trace is left on the device.
Web Access FAQ
Is the web app as secure as the desktop app?
Yes. The web app uses the same end-to-end encryption model as the native clients. Encryption and decryption are performed locally using the Web Cryptography API — your key is never sent to our servers.
Can I use it safely on a shared or public computer?
Yes. Session keys are held only in memory and are wiped when you close the tab. We recommend signing out explicitly on shared devices, which triggers an additional key wipe and clears the auth token.
Which browsers are supported?
Any browser with full Web Cryptography API support: Chrome, Firefox, Safari, and Edge in their recent versions. We test against the two most recent stable releases of each.
Can I preview files without downloading them?
Yes. Images, PDFs, and plain-text files can be previewed inline after decryption. The decrypted data is only ever held in memory — it is not written to disk.
Does the recipient of a shared link need an Offkeep account?
No. Anyone with the link can download and decrypt the file. The decryption key is in the URL fragment, which never leaves the recipient's browser.