Skip to main content

Encrypt & Store

Every file you upload to Qpher Vault is automatically encrypted with quantum-safe cryptography before being stored. This page explains how it works and what you can encrypt.

How Encryption Works​

When you encrypt a file, the following happens:

  1. A random DEK is generated — a 256-bit AES key unique to this file
  2. Your file is encrypted — using AES-256-GCM (the industry standard)
  3. The DEK is wrapped — using X-Wing KEM (ML-KEM-768 + X25519)
  4. The encrypted file is uploaded — to Cloudflare R2 secure storage
  5. The DEK is discarded — only the wrapped version is kept

The private key needed to unwrap the DEK stays in the server-side Key Management Service. It never touches your device or leaves the secure environment.

Encrypt a File​

  1. Tap the + button in the top-right corner of the document list
  2. Select Encrypt File
  1. Choose a file from your device — photos, PDFs, documents, or any file type
  1. Wait for encryption to complete — you'll see a progress indicator
  1. Done! Your file is encrypted and stored securely

Security Badges​

After encryption, you'll see security badges on your document:

BadgeMeaning
Post-Quantum ProtectedEncrypted with NIST FIPS 203 compliant algorithms
AES-256-GCMIndustry-standard symmetric encryption
X-Wing KEMHybrid key encapsulation (ML-KEM-768 + X25519)
SignedDocument has a digital signature (if you chose to sign)

Supported File Types​

Qpher Vault can encrypt any file type, including:

  • Photos (JPEG, PNG, HEIC)
  • Documents (PDF, Word, Excel, PowerPoint)
  • Text files (TXT, CSV, JSON, XML)
  • Archives (ZIP, TAR)
  • Audio and video files
  • Any other binary file

Storage Limits​

Storage limits depend on your subscription plan:

PlanStorageMax File SizeMonthly Uploads
Explorer (Free)50 MB5 MB5 documents
Personal5 GB50 MBUnlimited
Starter50 GB50 MBUnlimited
Professional250 GB200 MBUnlimited
Enterprise2 TB500 MBUnlimited
Need more storage?

You can upgrade your plan anytime from the Account tab in the app.