VaultShare

VaultShare sends your files and messages straight to another device over an end-to-end encrypted, peer-to-peer connection. Your data travels directly between the two devices and is never uploaded to or stored on any server.

No accounts. No cloud. No tracking. Just open the app, pair with a short code or a QR scan, and share.

HOW IT WORKS
1. One device taps "Generate Secret Room" to get a 6-digit code (e.g. 529-194) and a QR code.
2. The other device enters the code — or scans the QR — to join.
3. Both screens show a security verification code. Confirm they match to rule out a man-in-the-middle; transfers stay locked until both sides verify.
4. Pick your files and they stream directly to the other device, each chunk encrypted and checksum-verified on arrival. You can also chat securely over the same connection.

REAL END-TO-END ENCRYPTION
• ECDH (P-256) key exchange with HKDF-SHA256 to derive a shared session key
• AES-GCM-256 authenticated encryption on every file chunk and message
• SHA-256 integrity check on every received file
• A human-comparable security code to defeat man-in-the-middle attacks
• Keys are generated and held only on your two devices — we never see them

PEER-TO-PEER, NOT THE CLOUD
Files and chat move over a direct WebRTC connection between the two devices. A lightweight signaling server only helps the devices find each other; it never receives your file contents, messages, or keys. There is no storage server holding your data.

PRIVATE BY DESIGN
• No sign-up, no login, no profile
• No analytics, advertising, or tracking
• No personal data collected
• The camera is used only to scan room QR codes — nothing is recorded

SECURE CHAT
Send end-to-end encrypted messages to your peer over the same private channel.

WORKS WITH THE WEB APP
VaultShare uses the same protocol as the VaultShare web client, so you can share phone-to-phone or phone-to-browser, in either direction.

Note: VaultShare connects two devices through a signaling server to establish the peer-to-peer link. On some restrictive networks a relay (TURN) may be used to complete the connection; it only ever forwards already-encrypted data.

Your files stay yours.