Skip to main content

Zero-knowledge encrypted media storage

Your browser encrypts every file before it leaves your device

Ciphek stores only ciphertext. Your master password derives the keys, your browser runs the cryptography, and our servers never see the plaintext. If we are raided, there is nothing to hand over.

Create your vaultSee how it works

Already have an account? Sign in

Argon2id · XChaCha20-Poly1305 · HKDF-SHA256

Built for privacy-first workflows

What zero-knowledge encryption means in practice

Every operation that touches your data runs in your browser. The server stores encrypted bytes and nothing else.

  • Zero-knowledge by construction

    Your master password never leaves your browser. Argon2id stretches it into a 256-bit key, and HKDF derives per-purpose subkeys. The server stores only encrypted blobs.

    Argon2id · HKDF-SHA256

  • Encrypted video streaming

    Each chunk decrypts with XChaCha20-Poly1305 and feeds into MediaSource for real-time playback. You watch without downloading the entire file first.

    XChaCha20-Poly1305

  • Client-side encrypted search

    Your filename and tag index is built on your device after decryption. The server never sees what you search for or what results you click.

    Encrypted index · minisearch

  • Photos and videos, one vault

    Upload, view, and organize both media types. Every file is encrypted with its own random key, wrapped by your master key hierarchy.

    Per-file envelope keys · AES-KW

Start encrypting your media

Your browser handles the cryptography. We never see the plaintext.

Create your vaultRead the architecture

No credit card. 5 GB free.