Frequently Asked Questions

CopyClap is a secure file storage service that encrypts your files inside your web browser before uploading them. Think of it like a safe deposit box: only you have the key, and no one else — not even us — can open it.

Before any file leaves your computer, it gets scrambled using strong encryption right inside your browser. The scrambled file is then sent to our servers for storage. When you download it, your browser unscrambles it back to the original file. Because the scrambling happens on your device, we never see your original files or your keys.

Yes, CopyClap offers a free tier with generous storage. You can upload, store, and download your files without paying. We may offer paid plans in the future with more storage and features.

It means we cannot read the contents of your files. The encryption happens on your device, so by the time your files reach our servers, they are already scrambled into unreadable gibberish. We only store the scrambled version. We cannot read your files, and we cannot give anyone else access to them.

No. Because your files are encrypted before they reach us, there is no way for our staff — or anyone who might breach our servers — to read your files. The only way to unscramble a file is with your vault password, which only you know and which never leaves your device.

CopyClap uses AES-256-GCM, a widely trusted encryption standard used by banks and governments worldwide. Breaking it with today's technology is considered practically impossible. Each file gets its own unique encryption key, and that key is then protected by your vault password.

Your vault password is the secret phrase you create to protect your files. It is used to encrypt and decrypt your files inside your browser. Unlike your account password (which lets you log in), your vault password is never sent to our servers. It stays on your device only.

Your account password lets you sign in to CopyClap. We store a secure hash of it so we can verify your identity. Your vault password protects your actual files. We never see it, store it, or even know what it is. If someone steals your account password, they still cannot read your files without your vault password.

If you forget your vault password and you do not have a recovery phrase, your files cannot be recovered. We genuinely cannot help you restore them — we do not have your password or your keys. This is the trade-off of privacy: no one but you can access your data.

If you do have your 12-word recovery phrase, you can use it to restore access to your vault and set a new password. Go to your Account page, click "Unlock Vault," then "Forgot vault password?" and follow the steps.

Yes. Go to Account → Vault → Change Password. You will need your current vault password to make the change. Your files will remain fully accessible — only the password that wraps your vault key changes, not the key itself.

Your recovery phrase is a set of 12 everyday words (like "apple river mountain...") that acts as a master backup of your vault. It is generated when you create a backup from your Account page. Anyone with these 12 words can restore your vault and access your files, so treat it like the master key to a safe.

Because your vault password is never stored on our servers, we cannot reset it for you. The recovery phrase is your safety net. If you forget your vault password, the recovery phrase is the only way to get back into your vault without losing your files.

Write it down on paper and store it somewhere safe and private — ideally in more than one physical location. Do NOT store it:

• In a text file on your computer
• In cloud storage (Google Drive, Dropbox, etc.)
• In a password manager that syncs online
• In an email or message

If someone finds your recovery phrase, they can access your files. If you lose it and forget your vault password, your files cannot be recovered.

As long as you remember your vault password, you can still access your files and create a new recovery phrase at any time from your Account page. However, if you lose your recovery phrase and forget your vault password, your files are permanently unrecoverable.

Yes. Go to Account → Recovery → New Backup. This will generate a brand new 12-word phrase and overwrite your old backup. Your old phrase will no longer work, so make sure to save the new one immediately.

All files are encrypted in your browser using AES-256-GCM before they ever leave your device. We only store ciphertext — we cannot read your files, filenames, or folder names. Your vault password is never sent to our servers.

When you unlock your vault, your encryption key is kept in memory so you can use your files without re-entering your password on every page. Clicking Lock immediately clears that key from memory. Your files remain safely stored; you just need your vault password to access them again.

No. We do not have your vault password or your encryption keys. If we receive a legal request, the only thing we can provide is encrypted data that is useless without your password. However, like all services, we do see account metadata such as file sizes, storage usage, and access timestamps needed for quotas and operations.

If someone installs malware or a malicious browser extension on your device, they could potentially access your files while your vault is unlocked. This is a limitation of all browser-based encryption. For maximum safety:

• Keep your browser and extensions up to date
• Only install extensions from trusted sources
• Click Lock when you are done using your files
• Do not paste unknown code into your browser's developer console

You can upload individual files up to 5 GB. Large files are automatically split into chunks during upload, so even if your connection drops, you can resume where you left off.

When you delete your account, all your files and encryption keys are permanently deleted from our servers. Because your files were encrypted with keys only you had, there are no decrypted copies left anywhere. Deletion is irreversible.

Yes. You can create secure share links for individual files or entire folders. Recipients can download your files without needing an account or your vault password — the share link itself contains the decryption key. You can set expiration dates and download limits on each share.

Yes. Changing your vault password does not change the underlying key that encrypts your files. It only changes how that key is protected. All existing files remain fully accessible after a password change.

Go to Account → Security → Change Password. This changes the password you use to sign in. It does not affect your vault password or your files.

Account deletion is not yet available through the web interface. If you need to delete your account, please contact support. All your files and data will be permanently removed.

Yes. You can sign in from any device with a modern web browser. Your vault password works the same everywhere. Just remember that unlocking your vault on one device does not automatically unlock it on another — you will need to enter your vault password on each device.