Your data is private. And stays that way.
At Veault, security is not about vague marketing terms, but about a fundamentally different approach: a zero-knowledge architecture where you are the only one who can access your data. Below, you can read exactly how we achieve that technically.
Strong encryption
AES‑256 + PBKDF2 protect your vault against any form of access.
Strong encryption
AES‑256 + PBKDF2 protect your vault against any form of access.
Zero-Knowledge
We cannot see your data. Only you have the key.
Zero-Knowledge
We cannot see your data. Only you have the key.
Why Veault is fundamentally more secure
Most digital services store your data on their own servers — meaning: they can access it. Veault works differently. Thanks to our zero-knowledge, self-sovereign architecture, we technically cannot access the contents of your vault. And that is precisely the point.
- You always remain the owner
- Only you have the password
- Your vault is encrypted on your device
- We only store the encrypted file (without the key)
How your vault is technically secured
Everything happens locally on your device
You enter your data via the browser. The browser encrypts everything locally with a password that you choose yourself. Therefore, your data never leaves your device unencrypted.
Strong encryption
We use AES-256 encryption, a standard that is also used by governments for classified information, for example.
Strong password protection
We use PBKDF2 with a high iteration count to slow down brute-force attacks. Your password is converted into a secret key that is impossible to guess — provided it is chosen strongly.
No transmitted passwords
The password you choose to encrypt your Veault is never sent to our servers. Never. Period.
Of your data is encrypted locally before it reaches our servers.
bit AES encryption key (AES-256).
GDPR-compliant hosting on European servers.
Vault passwords stored. Not encrypted, not hashed. Only you know it.
What if…?
Veault is designed with the idea that anything can go wrong — except your privacy.
What if someone tries to break into our servers? We take our own security very seriously, but should someone gain access anyway, they will only find an encrypted file that is useless to them. Because encryption happens entirely locally, your vault is completely unreadable without your password.
What if an employee has malicious intent? Even then, there is nothing to gain. Our architecture prevents anyone — including internal staff — from having access to your data. We simply have no access.
And what if a government forces us to release data? Then we give exactly what we have: an encrypted file without a key. Because we do not have your password and never store your data unencrypted, we cannot reveal anything. Even if we wanted to, it is technically impossible.
- Server breach? No access to your vault without your password.
- Malicious employees? Not possible — we technically cannot view your data.
- Government demands? We cannot hand over anything except encrypted, unreadable data.
Your role in security
Veault is designed so that no one — even us — can access your data. But that also means: You are the only one with the key. Therefore, choosing and keeping a strong password is crucial.
When you lock your vault, we suggest a strong passphrase by default using the Diceware method. This is a sequence of random, recognizable words such as:
doctor-bouquet-samba-hotel-atlas-tigerSuch a passphrase is much harder to guess than a normal password, but much easier to remember. You don't need to remember strange characters or capital letters — just six random words. Prefer to choose a password yourself? You can. We will then show you how strong your password is and give tips to make it more secure. As soon as you lock your vault, all encryption happens on your device. So your data is secured first before anything goes to our servers. And because we never get to see your password, we can never open your vault either. Please note: this also means that we cannot reset your password if you forget it! You can also download your vault as an encrypted file. That way, you always have your own copy, independent of our system.
