AsterCrypt encrypts every file in your browser before anything is uploaded. Your passphrase never leaves your device. Our server cannot open your vault.
In your browser, with the vault unlocked.
On our servers, at all times.
No names, no folders, no keys. Only encrypted blocks, their size and their date.
Every file is sealed in your browser before a single byte leaves. The server keeps blocks it cannot open, without any key that would let it try.
Every file gets its own AES-256-GCM key, generated in your browser. What gets uploaded is already unreadable, and stays that way on our disks.
Names, types and folders are encrypted along with the files. The server only sees a random identifier.
Your passphrase becomes a key on your device. The server only receives an encrypted envelope it cannot open.
{ "vault_key": "decrypted locally", "sent": false }OKYour passphrase or your 256-bit recovery key unlocks the vault in your browser. A passphrase that is too predictable is rejected at creation.
Export your vault as encrypted 100 MB volumes. Each volume carries an authenticated inventory: remove or replace a single file, and the archive is rejected.
Download the recovery tool: a single self-contained HTML page that blocks every network connection. With your archive and your passphrase, you get everything back, on your own computer.
With no interaction, AsterCrypt removes the vault key and the decrypted file list from the app. Nothing is stored in the browser: no passphrase, no key.
Authenticated encryption detects any tampering, any swapping of files between vaults and any name substitution. Tampered data is never shown as valid.
Plans add storage, never different encryption. If your subscription ends, your files remain viewable and exportable.
Billed monthly
Billed monthly
Tailored capacity
Payments are not open yet: no money can be charged for now.
What people ask us before opening a vault.
No. Each file is encrypted in your browser with its own key before upload. Your passphrase and your recovery key are never sent to us. We store encrypted blocks, their size and their date, nothing more.
Your recovery key, shown only once when the vault is created, also unlocks it. Without the passphrase or the key, no one — including us — can recover the files. That is the price of real encryption.
Export your .aster backups and keep the recovery tool: a self-contained HTML file that reopens your archives offline, without our server.
No. New uploads are paused, but your files remain viewable, downloadable and exportable.
AsterCrypt only uses the browser’s standard primitives (Web Crypto): AES-256-GCM and PBKDF2-SHA-256 with 600,000 iterations. No independent audit has been carried out yet; we say so plainly.
Your email address, the number and size of your encrypted blocks, and their timestamps. Your password is transformed in your browser before it is sent; we never see names, folders, contents or keys.
Setting up your account takes two minutes, with your authenticator app. Have something to write with: your recovery codes are shown only once.
Create my account