01
Choose the file
Upload the document, photo, or file you want to protect.
How it works
Three steps and your file is protected.
02
Set a password
Your password protects the content with strong browser-side encryption.
03
Share the vault
Download the encrypted file and send it with a shared link.
Simple Vault
Your
own
files.
Your
own
keys.
Everything
runs
completely
locally.
On
your
device.
Zero-Knowledge.
Nobody
sees
your
data.
Not
even
us.
documento.pdf
documentpost-quantum encryption · 100% local
Ready for the quantum era.
on every device
Windows
macOS
Linux
Android
Try it now
3 creations and 3 opens without an account.
You can try the service before signing up: create up to 3 vaults and open up to 3. After that, use a free account.
Up to 3 free creations
Generate vaults without an account and see how it works.
Up to 3 free opens
Open vaults without an account, then sign in to continue.
Account to continue
With an account, you can create and open vaults without limits.
Desktop and mobile apps
Download software for every platform.
Download the app for Android, Linux, Windows, and macOS with the package made for your platform.
Windows (PowerShell)
irm https://vaultsemplice.com/download/install.ps1 | iex
Requirements: Node.js >= 18
Linux, macOS Intel & Apple Silicon (Bash)
curl -fsSL https://vaultsemplice.com/download/install.sh | bash
Requirements: Node.js >= 18, unzip
Linux
Linux builds for desktop and server distributions.
Windows
Windows installers for modern PCs.
macOS
macOS app for Apple silicon and Intel Macs.
.svg){kind=logo}
Android
Download the Android APK for phones and tablets.
Manual ZIP download
Full archive for manual use.
All available downloads are linked to the official files uploaded to the site.
Note: not all web app features are available yet on every platform — for example, post-quantum ML-KEM-768 encryption currently works on the web app only.
Security checks
Windows installation and file verification.
On some Windows installations, Microsoft Defender SmartScreen can show "Windows protected your PC" because the app is new and does not yet have public reputation. To continue, click "More info" and then "Run anyway" only if you downloaded the file from the official site.
VirusTotal compares the file with many independent antivirus engines and sandboxes. The file published here is safe when your download hash matches the hash shown below and in the report. The public check for the Windows file shows 2 detections out of 69: when an app is packaged with executable-builder tools, some engines can produce false positives. Screenshots, report link, and file hashes are included here for verification.
Open VirusTotal result
SHA-1
ce70571496e0ca6137e6ca42cba38ffb687b9033
SHA-256
0afaa300078a95004167fc7ff323b782438fa826e4e60ec5a12754430df4eb42
SHA-1 and SHA-256 are file fingerprints: if you download the file and calculate the same hash, you know it has not been changed. They are useful for comparing the download with the VirusTotal report and checking that nobody replaced the executable with malware.
Short video
How the app briefly works
Reviews
People using it every day.
★★★★★
"Very easy to use, perfect for sending sensitive documents to clients and partners."
Marta, freelance★★★★★
"The design is clean and the security feels clear, without useless clutter."
Davide, designer★★★★★
"I created a vault in seconds and shared it with my team right away."
Sara, project manager★★★★★
"The simplest way I have found to protect files without technical complications."
Luca, founder★★★★★
"It is fast, reliable, and I like that you do not have to register immediately."
Elena, studio legale★★★★★
"I use Simple Vault to share confidential documents with collaborators."
Giorgio, consulente★★★★★
"The best part is the simplicity: no confusion, only what is needed."
Chiara, educator★★★★★
"It creates and opens vaults in seconds. I recommend it for sensitive files."
Marco, operations
⭐ Star us and follow us on GitHub
FAQ
Frequently asked questions.
Is the content really encrypted?
Yes. The vault is encrypted in the browser with a key derived from the password before it is downloaded or shared.
Do I need an account?
You can create up to 3 vaults and open up to 3 without an account. After that, you need a free account.
Can I set an expiration date?
Yes, the product supports an optional expiration date and an open limit.
Can anyone open the file?
No. The right password is required to unlock the content.
Are my files uploaded to the server?
No. Vault creation and opening happen in the browser. The server only serves the page and account settings.
Can I recover a forgotten password?
No. The password is not saved by the site. If you lose it, the vault cannot be unlocked.
What can I do without an account?
Without an account you can create up to 3 vaults and open up to 3. Theme and language still work from the top bar.
Are settings saved?
Theme and language are saved on this device. When you sign in and save settings, they are connected to your account.
Does it work on phone and tablet?
Yes. The interface adapts to small screens, tablets, and desktop.
What format is the created file?
The site generates a .vault file containing metadata and encrypted content, ready to download or share.
Ready to protect your files?
Try the full flow now and see how simple secure file sharing can be.
Activity
Latest action log.
Your opinion
Leave a public review.
0.0
MacBook help
If macOS says the app is damaged.
Some Macs block beta apps downloaded from the web and show a message such as "app is damaged" or "cannot be opened". If you downloaded Simple Vault from the official site, open Terminal and try one command at a time. After each command, try opening the app again.
Try 1: app named Vaulty
Use this command if the app installed in Applications is named Vaulty.app.
xattr -dr com.apple.quarantine /Applications/Vaulty.app
Try 2: app named Vault Semplice
Use this command if the app in Applications is named Vault Semplice.app or if the name contains a space.
xattr -dr com.apple.quarantine "/Applications/Vault Semplice.app"
If the app has a different name, replace the path after /Applications/ with the exact name. Do not use these commands on apps downloaded from sources you do not trust.
Privacy policy
Website, cookie, and app privacy.
Website privacy
On the Simple Vault website, creating and opening protected files happens in the browser. The original file, password, and unlocked content are not uploaded to a site server during encryption or decryption: the browser generates the .vault file and, when requested, the recap PDF on the user device. The site uses Firebase for accounts, sign-in, preferences, free-trial limits, and public reviews. This means email, account identifier, profile name, language, theme, and reviews may be stored to make login, settings, and public features work.
Cookies and local preferences
The site uses technical cookies, localStorage, and sessionStorage to remember cookie consent, language, theme, sign-in state, free trial, and interface preferences. These data keep the service stable between visits and are not meant to sell advertising profiles. If you clear browser data, local preferences, free-trial state, and saved sessions may be lost or requested again.
App privacy
Desktop and mobile apps are beta versions of the service. In the apps too, the goal is to keep file encryption and unlocking on the device. Apps may use Firebase for login, settings, reviews, and minimal profile sync, just like the website. Because they are beta, there may be temporary differences between platforms, screens, or available features: for sensitive operations, always keep a safe copy of original files, .vault files, and recap PDFs.
Responsibility and security
Simple Vault cannot recover a forgotten password because the password derives the encryption key. If you lose the password or recap PDF, the .vault file may no longer be openable. Keep passwords, recap PDFs, and .vault files in separate places when they contain sensitive information, and share them only with authorized people.
Optional Google Drive backup
If you choose to connect Google Drive, the already-encrypted .vault file is sent directly from your browser to a "Vault Semplice - Backup" folder in your own Google Drive, using Google's sign-in window. This never goes through our servers, and the connection only ever sees files it created itself, never your other Drive content. You can disconnect at any time from your Google Account permissions page.
Optional Dropbox backup
If you choose to connect Dropbox, the already-encrypted .vault file is sent directly from your browser to a dedicated "Vault Semplice Backup" folder in your Dropbox, using Dropbox's sign-in window. This never goes through our servers, and the connection can only see that dedicated folder, never the rest of your Dropbox. You can disconnect at any time from your Dropbox connected-apps settings.
Cybersecurity news section
The /cyber-news page shows headlines and summaries from public RSS feeds of third-party news sources (The Hacker News, BleepingComputer, Dark Reading, Security Magazine, Schneier on Security, CISA, CERT-Bund/BSI, SANS Internet Storm Center, Cybersecurity360). Our server fetches these feeds and their preview images on your behalf, so your browser never contacts those third parties directly while browsing this section; it only does so if you click through to read the full article, which opens the source's own site in a new tab. Non-Italian headlines and summaries may be translated automatically. This section does not send any of your files, passwords, or account data anywhere -- only the feed content itself passes through our server.
Account privacy
Account data and deletion.
Delete the account from the website
On the website, sign in with the same account, open Profile, go to Settings, and use the Delete account button. Deletion removes the Firebase Auth account and tries to remove the linked Firestore profile document. For safety, Firebase may require a recent sign-in: if you see that message, sign out, sign in again, and repeat deletion.
Delete the account from the app
In beta apps, open Profile or Account settings and look for Delete account. If the installed version does not show the button yet, update to the latest app or sign in to the website with the same account and delete the account from website settings. The account is the same between website and app when you use the same email or Google sign-in.
What remains on the device
Deleting the account does not automatically delete files already downloaded to your computer or phone, such as .vault files, recap PDFs, original files, or unlocked files. Those files are under your control and must be deleted manually from the device, personal cloud, or chats where you shared them.
Reviews and public data
If you published a review, you can delete it before deleting the account from the reviews section. After account deletion, some actions may require contacting the site owner because you will no longer be authenticated with the same profile.
Documentation
Complete Simple Vault documentation.
Quick guide: how to use the whole site
Here are all the main steps, in order. 1) Sign up or log in from the button at the top (optional for basic features, required for some advanced features such as post-quantum). 2) To protect a file: go to "Create a vault", choose "A file", select the file from your device, choose the protection mode (Standard key with password, post-quantum with a public key, or Core Lock) and confirm. 3) Download the generated .vault file and, if available, the recap PDF or the recovery document: keep them in a place different from the .vault file. 4) To recover a protected file: go to "Open a vault", upload the .vault file, the site automatically recognizes the type of protection and asks for the password or document needed. 5) In the Profile/Settings section you can change language, theme, account data, or delete the account. All encryption and decryption happen in the browser: files are not uploaded to the servers during these steps.
How the website works
Simple Vault turns a normal file into a password-protected .vault file. The user selects a file, chooses a password, optionally sets expiration and maximum opens, then generates the encrypted vault. The important part is that encryption runs in the browser: the site provides the interface and code, but the content is processed on the device. When the vault is created, you can download the protected file and also a recap PDF with useful information for remembering password, link, and opening rules.
Desktop and mobile apps
The Android, Linux, Windows, and macOS apps bring the same idea into an installable experience. They are published as beta: they can be used, but may not work on every device, may require manual permissions, or may differ across platforms. On macOS, Gatekeeper can block apps that are not yet fully signed or notarized; that is why the MacBook section includes copyable commands to remove quarantine from the package downloaded from the official site.
Privacy, cookies, and saved data
Website privacy is based on a simple separation: files and passwords stay on the device during encryption and opening, while accounts and preferences may be stored in Firebase to enable login, profile, language, theme, free trial, and reviews. Technical cookies and local preferences prevent the site from asking the same things on every visit and keep the experience consistent. Do not treat the recap PDF as public: if it contains passwords or links, handle it as a sensitive document.
Account, settings, and deletion
The account lets you continue beyond the free trial, save preferences, and use profile-linked features. From the website you can open Profile, open Settings, change name, organization, bio, theme, and language, or delete the account. Deletion is final for the online account, but it does not delete files already downloaded. In beta apps the intended path is Profile or Account settings; if the button is not visible yet in the installed build, use the website with the same login.
Good security habits
Choose long passwords that you do not reuse, keep the recap PDF separate from the .vault file, and send the password through a different channel when sharing sensitive content. If you set expiration or an open limit, treat those limits as extra protection and not the only barrier. Before deleting originals or copies, always verify that you can open the vault with the correct password.
Core Lock
Core Lock is a new protection feature, more secure than the other modes available on the site. Activate it by choosing "Core Lock" as the protection mode when creating a vault: the site automatically generates everything needed, without choosing a password, and produces two files to download, the .vault file and a recovery document in .txt format. Always keep the two files in separate places. The site automatically recognizes a Core Lock file when you upload it in the "Open a vault" section and will ask you to also upload the recovery document to complete the process. For security reasons you can generate a Core Lock file only once per browser session.
POST-QUANTUM GUIDE
What is the new ML-KEM-768 key pair?
It is designed to protect the file key even against future quantum computers. Everything is processed locally in the browser.
Public key .vspub
You can share it freely. Anyone receiving it can encrypt a file for you, but cannot decrypt it.
Private key .vspriv
It is personal and contains only the encrypted private key. Never share it and keep it with its password.
Protected .vault file
The recipient is identified in the internal header. The extension always remains .vault and the site recognizes the format automatically.
How to open it
Select the .vault, the .vspriv belonging to the same pair, and the private-key password. Password, key and file must match.
Remember
If you lose the private key or its password, Simple Vault cannot recover the files. They are not stored on the servers.