From your device to our servers, step by step, with every algorithm named so you can check it against the code.
What happens between “drop file” and “file is stored”. The file is encrypted before it leaves your device. Your password is never sent anywhere — not even to us.
No proprietary cryptography. No undisclosed algorithms. Standard primitives, chosen for known properties, used in standard ways.
Read this section before you sign up. The recovery phrase is not optional.
A 12-word BIP39 mnemonic generated on your device at signup. Your master key is deterministically derived from this phrase — it is the root of all your encryption. We never see it. Lose this phrase and your password, and your data is gone.
word1 word2 ... word12 Deterministically derived from your 12-word phrase. Encrypts every file you ever store. Lives only on devices you’ve unlocked. Never transmitted in the clear.
derive_key(mnemonic) → 256-bit key Signs you in and, in the browser, wraps your master key on that device. The browser clears the unlocked key after inactivity (30 min by default, 60 at most) and asks for the password again. Changing the password does not change the master key.
web: PBKDF2-SHA256(password, salt) → wrap-key You use the 12-word phrase to re-derive your master key on a new device and set a new password. No data lost.
Your account remains recoverable: request a one-time email link, set a new password, and keep using your account. Your vault data lives only on devices already unlocked — it stays readable there. Generate and back up a new phrase immediately from settings; until you do, a lost password on a new device means the vault data on it is unrecoverable.
Your data is permanently inaccessible. We cannot help — no backdoor, by design. Your account is still recoverable via email reset: request a one-time link, set a new password, log in, delete your data or account, and stop billing. The encrypted files, though, are gone for good.
Encryption protects your files. These protect the account that holds them — available today.
Sign in with a passkey bound to your device or security key — nothing to phish, nothing to leak in a breach. There is no shared password for an attacker to steal.
Add a time-based one-time code from any authenticator app as a second factor. Even a stolen password on its own cannot open your account.
When you use a password, it is never sent to us. We authenticate you with the OPAQUE protocol — the server only ever sees a proof that you know it, never the password itself.
We log every security-relevant change here: cryptographic primitive upgrades, key-rotation events, post-mortems, and resolved disclosures.
When entries appear here, they will list the change, the date, the affected components, and the reasoning. This page exists so that changes are public, dated, and auditable.
Subscribe via RSS at beebeeb.io/security.rss — coming soon.
14-day free trial. No card or iDEAL needed to start. Zero-knowledge from the first byte. Read the code, then decide.
Start a 14-day trial