The Vault

For the records only you should open.

A digital vault for documents that are yours alone: one per person, encrypted on your device, with its own passphrase and a recovery key you keep.

Start free What belongs in the Vault ↓
KuduDoc / Vault
Locked until recovery is set up How recovery works ↓

Which documents belong in a digital vault?

Only the ones nobody else should ever open, not even in an emergency. Ask yourself one question: will anyone else ever need this without you? If yes, keep it in the Library. If only you should open it, use the Vault.

Someone else may need it

Keep it in the Library

Records a partner, colleague or family member may need to reach.

  • Share a copy when someone needs it
  • Trusted people can ask for emergency access, on Family
 Only I should open it

Put it in the Vault

Personal records you would rather nobody else could open.

  • Its own passphrase
  • A recovery key you keep

Sorting a whole household’s papers? The life file checklist shows what goes in the Library and what goes in the Vault, record by record.

Recovery is part of setup.

A separate job
from signing in.

Your account password signs you in. Your Vault passphrase opens the Vault.

KuduDoc holds no copy of that passphrase.

Personal VaultSetup · 1 of 4
Your Vault passphrase
••••  ••••  ••••

Separate from your account password.

Save the recovery key
before the Vault opens.

Setup asks you to save your recovery key and confirm you have it. Keep it somewhere you can reach if you forget the passphrase.

An account password reset cannot open the Vault.

Personal VaultSetup · 3 of 4
  1. Save your recovery keyKeep it within your reach.
  2. Confirm you have itBefore the Vault opens.

Keep the recovery key safe. If you lose both the passphrase and the recovery key, the contents cannot be recovered, by you or by KuduDoc.

Encrypted before upload.
Metadata stays visible.

On your device

Encrypted where you are.

Contents, filenames and display names are encrypted on your device before upload.

Your device
  • Contents
  • Filenames
  • Display names
Encrypted here
Upload
KuduDocEncrypted files
The encryption boundary
Stored by KuduDoc

What KuduDoc holds

The encrypted files, and an encrypted copy of your Vault key.

CiphertextWrapped key
Visible to the service

What stays visible

Your account, item ids, encrypted sizes, timestamps and recovery status.

Questions
people ask.

What it is, the way back, and the cost.

A private place online for documents only you should open. KuduDoc’s Vault is an encrypted document vault: contents, filenames and display names are encrypted on your device before upload, and it opens with its own passphrase, not your login. There is one per person, on every plan.
Use the recovery key you saved during setup. That is why setup asks for it before the Vault opens.
No. Emergency access, on Family, lets people you choose ask for your ordinary documents. The Vault is never included. Keep anything your family may need in the Library.
The Vault comes with every plan, including Personal. Personal is free, with no card and no expiry date. Family is $6 a month ($57 a year) and Professional is $12 ($120), per occupied seat, with a 14-day trial. Documents you have already sent are not affected by a plan change.

Save your recovery key first.
Then fill the Vault.

Decide what is yours alone.

Start freeRead the Vault security boundary →