Private
Encrypted
Storage
Decentralized cloud storage with AES-GCM-256 encryption and ZK wallet authentication.
No Tracking. No Backdoors.
Your Keys. Your Data.
Encrypted in your browser before it touches the cloud.
Your Files
Your Keys
Files are encrypted with AES-GCM-256 in your browser before upload. Prove access with zero-knowledge proofs. No one else can read your data.
Upload
Drag & drop
Encrypt
AES-GCM-256
Share
ZK-proof based access control
> Initiating AES-GCM-256...
The New Data Paradigm:
Why Decentralized?
True Privacy. True Ownership. Zero Knowledge. Traditional cloud providers can read your files, hand them over to third parties, or shut down your account without warning. Conseal encrypts everything client-side with AES-GCM-256 and authenticates through ZK wallet proofs — no one but you can access your data.
Client-Side Encryption
All encryption happens in your browser using AES-GCM-256 before data leaves your device. The server never sees plaintext. Your keys never leave your wallet.
Zero-Knowledge Auth
Authenticate with your wallet using zero-knowledge proofs. No passwords, no accounts, no personal data collected. Only you can prove access to your encrypted files.
True Digital Sovereignty
Share files wallet-to-wallet with granular permissions. Revoke access anytime. No centralized server can lock you out or hand your data to third parties.
Embrace
Privacy
Conseal uses AES-GCM-256 client-side encryption paired with ZK wallet authentication. No one — not even us — can read your files.
Browser-Side Encryption
Files are encrypted with AES-GCM-256 inside your browser before upload. The server only stores ciphertext it cannot decrypt.
Conseal Wallet Access
Prove ownership with zero-knowledge proofs. No accounts, no emails, no passwords. Just your wallet and your data.
Optional Encryption
Encrypt sensitive files client-side before upload. Decrypt only with your wallet or share keys with specific recipients.
Tamper-Proof Storage
Data stored on the blockchain cannot be deleted, altered, or blocked by any corporation or government.
Universal Storage
Upload single file or zip archives of any size. From critical documents to large media libraries.
Trustless Sharing
Share encrypted data with trusted wallet addresses. Grant access without exposing your private keys.
Cryptography
Stack
Every layer of Conseal is built on open-source, audited cryptographic primitives. No proprietary algorithms. No security through obscurity. Trust math, not marketing.
Sign In
Solana wallet via Privy. No email, no password. SIWS authentication.
Sign Message
Wallet signs a deterministic payload. Same wallet = same signature = your key seed.
Derive Key
HKDF-SHA256 turns signature into 256-bit vault key. Salted. Browser-only. Never transmitted.
Encrypt
AES-GCM-256 with fresh 96-bit IV per file. Filenames and MIME types encrypted too.
ZK Proof
UltraPlonk proves you derived the key from your wallet. Server verifies without learning the secret.
Zero-Knowledge
Proofs
Prove you own the vault without revealing the key. Noir circuits compiled to UltraPlonk. Proofs run client-side in WASM. Verified by Barretenberg server-side.
Prover
Your private inputs: vault_secret and salt. Lives only in your browser. Never sent to any server.
Circuit
UltraPlonk circuit: vault_ownership_v1
fn main(
vault_secret: [u8; 32],
salt: [u8; 32],
vault_commitment: pub [u8; 32],
wallet_hash: pub [u8; 32],
) {
let c = sha256(preimage);
assert(c == vault_commitment);
}
Verifier
What the server sees. Receives only the proof. Cannot learn your secret.
Why
Conseal
The honest comparison. No marketing spin. Just features, checked or crossed.