Security
Real security, engineered over six years
DeVault's architecture was designed around three essential principles: real security, trust, and simplicity of user experience. Here is what runs behind the calm surface.
End-to-End Encryption by default
Everything you place in DeVault is encrypted before it ever leaves your device. Your data remains encrypted, secure, and under your control — readable only by you, and by the people you choose under the conditions you define.
Distributed architecture
There is no single vault to break into. DeVault distributes its systems so that no one location, server, or component holds the whole picture — a structural defense, not just a technical one.
Segmented and isolated by design
Although DeVault's software components communicate with one another, the different parts of the system remain highly segmented and isolated. Each component knows only what it needs to — nothing more.
Self-isolation under attack
In the event of suspicious activity or a potential breach, the remaining components are capable of isolating themselves — containing the incident and preventing the spread of unauthorized access across the system.
Conditional access, enforced precisely
Keepers and beneficiaries gain access to a SafeBox only under the conditions and at the time you define. The rules you write are the rules the system enforces — there is no informal path around them.
Recovery without backdoors
Emergency recovery — after a lost phone, theft, or hardware failure — works through predefined structures and trusted individuals that you configure in advance. Recovery paths belong to you, not to us.
“The most sophisticated security architecture is the one you never have to think about.”Design principle
Simplicity is a security feature
Calm on the surface, rigorous underneath
One of the project's most important goals has been to maintain a calm, simple, and understandable user experience for ordinary users — despite the highly sophisticated security architecture operating behind the scenes. Security that people can't understand is security they won't use. DeVault is built so that doing the safe thing is also the easy thing.