Log inGet started
Features
DrivePhotosNotesCalendar and ContactsAssistantPasswordsMailFor developers
Why StavoExtensionsPricingDocsDownloadLog in
Docs

Secure Vault

A private corner of your Drive that only your devices can open.

Files in the Vault are encrypted on your device (AES-256-GCM, keys derived from your passphrase) before they're uploaded. Your server and your NAS store ciphertext only. Vault items never get share links, never get indexed and never show up in Drive, Photos or search.

Setup

  1. Pick a passphrase. Make it long.
  2. Save the recovery file (stavo-vault-yourname.stavokey). Put it somewhere that isn't your NAS: a password manager, a USB stick in a drawer.
  3. Optional: turn on Face ID unlock on your iPhone or iPad. The Vault locks again whenever the app goes to the background.

Read this twice: if you lose both your passphrase and your recovery file, your Vault files are gone. There is no reset, no support ticket, no backdoor. Not us, not your server admin, not you.

Forgot the passphrase?

Open the Vault with your recovery file instead, then set a new passphrase. Your files stay as they are.