Vault

How the vault works

Every document is protected by two halves of a key: one half lives on this Mac, the other half only your iPhone (via Face ID) can unlock. Follow these steps in order.

1. 1

   Generate this Mac's vault identity

   One-time setup. Click "Generate Mac quantum-safe identity" below.

2. 2

   Authorize a signer

   One-time setup. Click "Add a signer" below, then scan the QR code with your iPhone's Camera app and approve with Face ID.

3. 3

   Deposit a document (do this to protect a file)

   Choose a file in "Deposit a document", click Deposit, then download the .spq package it creates. That file is now useless without both this Mac and the authorized iPhone.

4. 4

   Withdraw a document (do this to open a protected file)

   In "Withdraw a document", choose the .spq file. A QR code appears automatically — scan it with the iPhone and approve with Face ID. The Mac finishes releasing it on its own and gives you a download button.

Deposit a document

Splits a fresh AES-256 key across a quantum-safe vault share and a Face ID-verified co-signer share — like a two-key safety deposit box.

Demo cap: 20 MB.