Skip to content
Help Center

Categories

Search the Help CenterCtrl K
On this page

What is Vault?

Vault is Drime's end-to-end encrypted space. Learn what is encrypted on your device, what Drime can still see and why your Vault Pass matters.

Updated Web

Vault is an end-to-end encrypted space in your Drime account. Files you put in it are encrypted on your device before they are uploaded, and only your Vault Pass can decrypt them. Drime never receives that password or the keys derived from it.

You open it from Vault in the left rail.

My Vault locked: the unlock screen with the Vault Pass field and the Unlock content button

The Vault is included on every plan, the free plan too.

#What end-to-end encryption means here

In the Vault, encryption happens in your browser, before the file leaves your computer. What Drime stores is encrypted data it cannot read without your Vault Pass.

The app says it in Settings > Vault: "Your Vault uses end-to-end encryption. All files uploaded to the Vault are encrypted on your device before being sent to the server. Only you hold the decryption key."

Settings, Vault, with the Vault encryption text and the Vault security options

#What is encrypted

  • The contents of every file.

  • File and folder names.

  • The real file type, the file dates, photo metadata and the tags you add.

  • Thumbnails: they are created and encrypted in your browser.

#What Drime can still see

Some information is needed to store and sync your files, so it is not encrypted:

  • the folder structure (how folders and files are nested);

  • the size of each encrypted file;

  • the dates the server stored each file;

  • which account uploaded each file.

#Your Vault Pass

The Vault Pass is the password of your Vault. It is separate from your account password, and you choose it when you create the Vault. When you create it, the app shows: "We don't know or store your Vault Pass anywhere on our servers."

#What works differently in the Vault

Some Drive features are not available in the Vault:

  • Office editing and version history;

  • search inside file contents (search in the Vault covers file and folder names only);

  • moving files between your Drive and your Vault (download the file, then upload it to the other side).

Images, PDFs, audio, video and text files can still be previewed: they are decrypted in your browser. See Add, open and manage files in your Vault.

#Use your Vault elsewhere

Your Vault also opens in Drime Desktop for Windows and in the Drime mobile apps, with the same Vault Pass. See Vault on your computer and phone.

rclone, WebDAV and the other tools you connect with an API token do not reach your Vault: its files are only available in Drime's own apps. WebDAV is not available yet.

#Get started

#How the encryption works

For readers who want the technical details:

Element

How it is protected

Keys

Derived from your Vault Pass with scrypt, in your browser

File contents

One random key per file, wrapped with your Vault keys; contents encrypted with XSalsa20-Poly1305 in 64 KiB chunks

File and folder names

Encrypted with AES-EME

Vault Pass and keys

Never sent to Drime

#Can I use Cryptomator with Drime?

Yes. A Cryptomator vault is made of ordinary encrypted files: you can upload it to your Drive or to your Vault, and Drime stores it like any other files. Drime has no plans for a deeper integration with Cryptomator.

#Next steps

Was this helpful?