Quantum Vault · ML-KEM · GridFS · No Size Limits

Your personal
quantum-safe
cloud vault

Upload files of any size to your encrypted personal vault. Files are encrypted in your browser before upload — PQCServer stores only ciphertext it cannot read. Share with a shortlink or directly by username. Free. No limits.

📁 Open my vault Create free account →
How it works

Encrypt locally. Store securely.

The vault uses the same ML-KEM encryption as messaging — your files are encrypted before they ever leave your browser.

Upload flow
1. Drag & drop file onto vault upload page
2. Browser loads your ML-KEM public key from your profile
3. ML-KEM encapsulation → shared secret derived
4. File encrypted with AES-256-GCM in the browser
5. Encrypted binary split into 3MB chunks
6. Chunks uploaded to Storage
7. File registered in your vault — permanent storage
Download & decrypt flow
1. Open vault dashboard → click file
2. Server streams encrypted file from GridFS
3. Paste your ML-KEM private key in browser
4. ML-KEM decapsulation → shared secret recovered
5. AES-256-GCM decryption in browser
6. Original file saved to your device
7. Private key never transmitted to server
Technical Architecture

No file size limits — ever

Files are split into 3MB chunks before upload. Each chunk is uploaded separately, bypassing any per-request size limits from CDN or proxy layers. The server reassembles the chunks server-side.

Chunked upload — example: 50MB PDF
Original file
contratto_q1.pdf — 50 MB
50 MB
After encryption
AES-256-GCM + IV — 50.0 MB
~50 MB
Chunk 1/17
3 MB
3 MB
Chunk 2/17
3 MB
3 MB
… 15 more chunks
each ≤ 3 MB — well under Cloudflare 100MB limit
≤ 3 MB
GridFS result
✓ Assembled — 1 file
50 MB
File Size
3MB
Chunk Size
0
Plaintext on Server
Vault Features

A complete encrypted drive

📋
Dashboard & File List

View all your vault files in a grid with icons, filename, size, upload date and access stats. Search by name, filter by tag, sort by date or size.

🔗
Shortlinks & Sharing

Every vault file gets a shortlink automatically. Generate new shortlinks anytime. Share directly with a registered username — they can download and decrypt with their own key.

🏷️
Tags & Notes

Organize files with up to 10 tags and an optional note per file. Filter the dashboard by tag to quickly find what you need.

♾️
Permanent Storage

Vault files have no TTL — they remain until you explicitly delete them. Unlike messages (which expire), vault files are your permanent encrypted archive.

🗑️
Clean Deletion

Deleting a vault file removes the GridFS chunks, all associated shortlinks, and the vault entry — completely and immediately. No lingering data.

📊
Storage Stats

Dashboard shows total files, total storage used, and per-file access count. Know exactly what's in your vault and how much space it uses.

Comparison

PQCServer Vault vs alternatives

Google Drive
CLASSICAL
  • Google can read your files
  • No post-quantum encryption
  • Large storage limits
  • Good UI and sharing
  • Privacy dependent on Google
ProtonDrive
E2E CLASSICAL
  • End-to-end encrypted
  • PGP/RSA — not quantum-safe
  • ~ 1GB free storage
  • Good privacy reputation
  • No post-quantum roadmap yet
Start your quantum vault today

Register, generate your keys, and upload your first file in under 2 minutes. Free forever.

Create free account → 📁 Upload a file