AeroVault

Military-grade, open-format encryption for your files - at rest and on any cloud.

Your files, encrypted end to end

AeroVault is the privacy anchor of AeroFTP: military-grade, open-format encryption for files at rest and in transit. Keep secrets in standalone .aerovault containers, or switch on a transparent crypt overlay so everything you send to any provider is encrypted before it leaves your machine - the cloud only ever sees opaque chunks.

AeroVault create dialog with security mode cards and password strength meter

A security stack that exceeds the standard

Every .aerovault container is built on audited primitives:

  • AES-256-GCM-SIV content encryption, with an optional ChaCha20-Poly1305 cascade
  • Encrypted filenames (AES-256-SIV) - even names and structure stay private
  • Argon2id key derivation (128 MiB) and HMAC-SHA512 header integrity

Encrypt any cloud, transparently

Turn on the AeroCrypt overlay and every list, upload and download to a remote is encrypted on the fly. You browse plaintext; the provider stores only ciphertext and encrypted names. It is wired into every path - GUI, CLI, agent and background sync - so nothing can accidentally write plaintext into your encrypted store, and it stays Cryptomator-compatible both ways.

Crypt overlay active, showing plaintext locally while the provider stores encrypted chunks
Error-correction status showing Reed-Solomon parity protecting a vault

Backups that heal themselves

Bit-rot happens. AeroVault can add Reed-Solomon error correction - embedded in the container or as a detached .aerocorrect sidecar - so a damaged archive can be repaired from parity. Repairs are fail-closed: every block is re-verified and the vault is only rewritten if everything checks out, otherwise it is left byte-for-byte untouched.

Open format, no lock-in

Your data should outlive any single app. The AeroVault engine is published as a standalone open-source Rust crate, with implementation guides for Rust, Java, Python, Go, C and JavaScript. You can also encrypt and browse standard ZIP and 7z archives with AES-256 - inspect them without extracting - and keep full Cryptomator interoperability.

Browsing a decrypted vault tree with an encrypted archive open
Free & open source

Take back your privacy

Download AeroFTP and create your first encrypted vault in seconds.

Download Now View on GitHub