How Veault keeps your digital legacy truly secure: A detailed look behind the scenes

We understand that arranging your digital legacy is a deeply personal and sensitive matter. When it comes to your most valuable information—from your online banking to cherished family photos and personal messages—you want absolute certainty that everything is kept and passed on safely, privately, and exactly according to your wishes. At Veault, this is at the heart of our mission. We are not just here to help you organize; we are here to protect.

Your privacy, our foundation: The Zero-Knowledge Principle

The foundation of Veault's security is our 'zero-knowledge' principle. This is more than a feature; it is an architectural choice that guarantees your privacy from the moment you start filling in your Veault.

What does this mean? It means that all the information you enter is encrypted directly on your own computer. This encryption is done using a password that you choose yourself and share nowhere. Only after your data has been converted into unreadable code locally on your device is this encrypted file sent to our servers.

The crucial result of this is that we, the Veault team, can never view your unencrypted data. We do not have your password, and under no circumstances can we decipher your information. The security is based on proven cryptography, not on a promise. You retain full and exclusive control over your data. Furthermore, you always have the option to download your own encrypted Veault file, ensuring you have a permanent offline copy.

The digital vault: State-of-the-art encryption

To transform your Veault into an impenetrable digital vault, we use the most advanced and globally recognized encryption technologies:

• AES-256-GCM for confidentiality and integrity: To encrypt your data, we apply the Advanced Encryption Standard (AES) with a 256-bit key in Galois/Counter Mode (GCM). This is the absolute gold standard in symmetric encryption and is used worldwide by governments, financial institutions, and security organizations for their most sensitive information. The 256-bit key length makes the encryption virtually unbreakable with current computing power. Additionally, GCM ensures that data not only remains secret, but also allows us to verify whether the data has been altered in transit or during storage. This guarantees that your encrypted Veault file remains exactly as you saved it.
• PBKDF2 for rock-solid password protection: Your chosen password is never used directly as an encryption key. Instead, we use PBKDF2 (Password-Based Key Derivation Function 2). This is a robust technique that converts your password into a cryptographically strong key through a highly compute-intensive process involving no fewer than 1,000,000 iterations. This process makes it extremely difficult for attackers to guess your password using 'brute force' attacks, even if they were to get hold of the encrypted file. Furthermore, a unique, random 'salt' is added to every encryption, ensuring that even identical passwords result in completely different encryptions.
• Complete randomness and control: For crucial components of the encryption, such as the 'salt' and 'Initialization Vector' (IV), we generate cryptographically secure random numbers. This ensures that every encryption is unique and unpredictable, which is essential for the strength of the algorithms used.
• Storage within the European Union: Your encrypted Veault is stored on servers strategically located within the European Union. These comply with the strictest European privacy legislation, such as the GDPR (General Data Protection Regulation).

Multi-layered protection: A line of defense around your Veault

Veault's security is not limited to encrypting your data. We apply a 'Defense-in-Depth' strategy, meaning we implement multiple independent security layers to create a robust line of defense:

• Secure in your browser: The Veault application is built to communicate only with trusted sources. This helps prevent malicious code from penetrating your browser.
• No malicious code via input: Everything you enter into your Veault is thoroughly checked and sanitized before processing. This ensures that no one can inject harmful instructions through submitted text.

What does this mean for you?

All these technical layers and principles boil down to one essential goal: peace of mind. You can use Veault knowing that your valuable personal information is protected by industry-leading security. We take care of the heavy technical lifting so you can focus on recording your wishes, your life story, and those important messages for your family.

At Veault, we believe in complete transparency and putting you in control. Your digital legacy deserves the very best protection, and that is exactly what we offer with Veault.