Vault privacy

Start with the files, then choose the protection

A folder full of identity scans needs a different sharing routine from a project folder used by a team. Begin by listing a few examples of the files you want to protect. For each one, write down who should read it, how often it changes, and what would happen if you lost access. This makes the decision concrete before you compare apps.

Privacy is easier to manage when the boundaries are visible. Keep personal records separate from material intended for clients or collaborators. Choose a simple folder structure and use it consistently. A well-defined vault should help you decide where a new document belongs without creating a maze of special exceptions.

Ask who can decrypt your files

“Encrypted” is a starting point for questions, not a complete description. Ask where encryption happens, where the keys are stored, and which people or systems can obtain readable content. The answers may differ between local files, cloud copies, previews, and shared documents.

For one concrete architecture, Cryptomator’s technical documentation describes a virtual drive that encrypts and decrypts files as you access them. This illustrates why the location of the readable view matters: a workflow includes both protected storage and a place where you work with the content.

Three decisions to make before you begin

• Access: decide which devices and people should be able to open each collection.
• Recovery: record the steps you would follow after losing your main device or forgetting a password.
• Copies: identify temporary downloads, exports, attachments, and backups that belong in your plan.

Try these decisions with a small set of harmless documents. Create a file, close the vault, reopen it, and recover a copy from backup. Write down anything that is confusing while there is little at stake. A repeatable routine is more useful than an impressive feature list that you cannot explain to the next person who needs access.

Think beyond the locked folder

A useful privacy plan also covers what happens before and after you open a file. Work deliberately with exports and attachments. Decide whether another app needs a readable copy, and review that app’s saving behavior. When someone leaves a project, review their access and consider what copies they may already hold.

For the next step, use our private file vault setup guide to plan your first collection. If your main concern is cloud access, explore private online storage. Our beginner’s guide to vault privacy walks through a complete everyday example.