P2P vault

Logins, notes, API keys and files: encrypted on your device, shared peer to peer.

Key facts

• SQLite database in the browser’s private storage (OPFS); only AES-256-GCM encrypted data is written to it.
• Unlock with a password (Argon2id), a passkey (WebAuthn PRF extension) or a 24-word recovery phrase.
• Manual lock and auto-lock after inactivity; clipboard cleared after 30 s; reveal limited to 10 s.
• ⌘K / Ctrl K palette to search, copy or reveal an item.
• Direct WebRTC sharing with a role (reader, editor, admin) and an expiry; content encrypted to the recipient’s X25519 key and signed with Ed25519.
• Concurrent edits detected (vector clocks): side-by-side diff, keep A, keep B or merge.
• Version history, encrypted backup export/import, local security report; breach check (HIBP) only on request.

Good to know

• Roles and expiry are enforced by the recipient’s app, not by cryptography: a recipient can copy what they have seen.
• Both vaults must be open at the same time to share (no offline delivery yet).
• Without your password, a passkey or the recovery phrase the vault is lost; clearing site data deletes it: export backups.

How to

1. Open https://filenymous.eu/app/#safe.
2. Write the 24-word phrase down offline, then choose a password.
3. Add your items; to share, add the recipient’s contact card.

All features

• Direct file transfer
• Dropzone (receive files)
• One-time secret
• Sharewall (ephemeral live wall for humans and AI agents)
• Streamed sharing (video and audio)
• Whistleblowing channel
• npm CLI “filenymous” (CI/CD)
• Browser extension (Chrome, Firefox)

Updated 2026-10-21