File 007 · Cross-Examination
Question the lock before you rely on it.
What gets encrypted, who holds the keys, what losing a device or a passphrase means, and what we can’t protect. If your question isn’t covered, send it to contact@adamanture.com.
Last updated: September 2026 · Written by humans.
§ 01 · Basics
What it is, and what it locks.
Apps for Windows and Android that encrypt the files and notes you choose, on your device. Keep them there, or in your own personal Google Drive, OneDrive or Dropbox. On any other computer, the web version encrypts and decrypts files in your browser.
No. The protection comes to the file, not the other way round. The Windows and Android apps encrypt the files you choose right where they are, on your device. If you want a vault in the cloud, it goes in the personal Google Drive, OneDrive or Dropbox you already use. There’s no new storage to buy and no moving day.
Private notes in the Windows and Android apps: rich text, checklists, colors, pins, archive and search, locked in the same vault as your files. With a cloud connected, they’re backed up to your vault, still encrypted.
Your device, plus personal Google Drive, OneDrive and Dropbox accounts, from both the Windows and Android apps. More storage providers are coming soon.
OneDrive work or school accounts, managed Google Workspace accounts and Zoho WorkDrive aren’t supported.
No — only the files you choose. In the Windows and Android apps, a file you choose on your device is encrypted right where it is. In the cloud, the encrypted copy goes into one Unlike Vault folder, and nothing else in your account is read, touched or encrypted in place.
The Windows and Android apps are in development and launch with the same features: files encrypted in place, local vaults, Encrypted Notes, optional cloud vaults and device unlock.
On any other computer, the web version encrypts and decrypts files in your browser: one file or many, with no folders, cloud or Notes. There are no macOS, iOS or Linux apps.
With Google or Microsoft. On the web, you can also add a passkey to your account. Dropbox connects as storage only; it isn’t a way to sign in.
Most vaults protect what’s inside with walls, and whoever gets past them can open everything. Unlike Vault locks each file itself, with its own key, so it stays protected on your device or in your own cloud without leaning on the walls around it.
§ 02 · Security
What’s protected, and where it stops.
Not the ones in your vault. They’re encrypted on your device first and stored under random names, and your filenames and folders are kept only inside encrypted indexes.
Your provider still sees metadata: how many encrypted objects there are, roughly how big they are, when they change, and the account and IP address that connect. The blueprint lists all of it.
No. We never receive your files, their names, your notes or your cloud logins. We keep your account key only in a locked form we can’t open; what opens it — your passphrase, your device’s secure unlock, or a passkey on the web — stays with you.
AES-256-GCM in 4 MiB authenticated chunks, with a fresh random key for every file. Your passphrase is stretched with Argon2id (64 MiB of memory, three passes), and one-way derivations use HKDF-SHA256.
The encrypted file format every Unlike Vault app reads and writes. It’s documented: a short header holding the file’s own locked key and encrypted metadata, then the encrypted chunks. On your own disk, a file keeps its name with .uvault added.
If you use a cloud vault, the metadata that provider can see; and the fact that you sign in with Google or Microsoft. The names of files kept on your own disk, which stay readable. And a device that’s already running malware as you.
Encrypting a file in place removes the original once the encrypted copy is verified, and on modern drives a deleted file can leave traces. The blueprint lists every limit, in full.
§ 03 · Loss & Recovery
When a device or a passphrase goes missing.
Whatever was on the lost device stays encrypted, and its sealed copy of your key opens nothing off that hardware; remove the device from your account when you can. Your cloud vaults and note backups are still in your cloud, still encrypted — sign in on another device and open them with your passphrase. Files and notes you kept only on the lost device went with it.
If you’ve set up another unlock method — your device’s secure unlock in the Windows and Android apps, or a passkey on the web — you can still open your vault with it. If you haven’t, we can’t help: there’s no reset, no recovery code and no master key. Your hint is stored in plain text, so keep it vague.
Then your files stay locked for good. There’s no master key and no backdoor, by design, because either one would be a target in its own right. You can delete the account and set up a new one; the old encrypted files stay in your storage, unopenable.
With a cloud connected, your notes are backed up to your vault and restored from it, still encrypted. Notes live in the Windows and Android apps, not on the web.
They stay exactly where they are, on your devices and in your cloud, still encrypted. Deleting the account destroys the locked keys we hold, so decrypt anything you want to keep first.
§ 04 · Pricing & Everything Else
What it costs, and who it’s for.
US$2/month + applicable taxes or US$20/year + applicable taxes, after 30 days free with no card. Checkout isn’t open yet, so nothing is charged today.
Because you already have some. We charge for the security layer, not for where your files live. Your storage stays with your provider, billed by them, if you pay for it at all.
Either plan unlocks every feature. The yearly plan, US$20/year + applicable taxes, is two months free before applicable taxes.
Enterprise? Let’s talk. For 100+ seats, email contact@adamanture.com. No 45-minute demo. A real reply, usually same day.
Secure Share is a separate Adamanture product for sharing files, and it’s coming soon. Unlike Vault itself doesn’t share files.
Send it to contact@adamanture.com with the steps to reproduce it. If it’s a security issue, say so up front; the Compliance & Trust page explains how we handle disclosure.
Want to check our work?
The blueprint lays out the key hierarchy, the file format and every known limit.