Your files. Truly Private.
Encrypt files in your browser before they ever leave your device. We store only locked boxes. You keep the only key.
The Key Difference
Most cloud storage encrypts your files — but they hold the keys. We don't.
Traditional Cloud Storage
They hold the keysYou upload a file. The service encrypts it on their servers. They hold the decryption key. If their servers are hacked, a rogue employee acts up, or a government requests data — your files can be opened.
The risk
- Service can read your files anytime
- Hacked? Files exposed
- Insider access? Employees can peek inside
CopyClap
You hold the keysYou upload a file. Your browser encrypts it before sending. The server receives only scrambled data. Without your password, no one can decrypt your files.
The result
- We cannot read your file contents — only encrypted data
- Storage breach? Files stay encrypted
- Insider access? No one can open your files
How It Works
Three steps. All encryption happens inside your browser.
Select & Encrypt
Your browser generates a unique encryption key and scrambles the file into unreadable ciphertext.
Upload
Only scrambled data reaches our servers. The encryption key stays on your device.
Download & Decrypt
When you need the file back, your browser decrypts it locally. We never see the plaintext.
Everything You Need
Secure storage, powerful organization, and seamless sharing — all with privacy-first encryption.
Client-Side Encryption
AES-256-GCM in your browser. The server never sees your keys or data.
Chunked Uploads
Upload files up to 5 GB with automatic chunking, resume support, and live progress.
Streaming Downloads
Decrypt on the fly with TransformStream. No memory limits, even for large files.
Folder Organization
Organize files in nested folders. Create, rename, move, and delete with ease.
Secure Sharing
Share with open links or password protection. Recipients decrypt in their browser.
Recovery Backup
Forgot your password? Your 12-word recovery phrase restores access.
Radical Transparency
We believe you should know exactly what we can and cannot access. No surprises.
What We Can See
Necessary for the service to function
- Your email address (for login)
- Encrypted file blobs (scrambled, unreadable data)
- File sizes (in bytes, not the actual content)
- Upload and download timestamps
- Your storage quota usage
What We Cannot See
Only accessible with your password
- Your vault password — never leaves your browser
- Your file contents — encrypted before upload
- Your filenames — encrypted inside metadata
- Decryption keys — generated and stay in your browser
- Share passwords — verified, never stored in plaintext
Your files. Your keys.
Our servers just store the locked boxes. Get started free — no credit card required.