Encryption
This page explains how Dvault protects your data with encryption and what that means in practice.
What is encrypted
- Vault contents at rest: data stored in your vault is encrypted.
- Data in transit: data transmitted between your device and Ankhora services is encrypted in transit.
Where encryption happens
Encryption is performed on your device as part of Dvault's security model. This supports a clear privacy boundary: your vault contents remain protected even during sync and sharing workflows.
What Ankhora can and cannot access
Ankhora cannot - Read or decrypt your vault contents - Recover your vault contents without your recovery material
Ankhora can - Help troubleshoot app behavior and connectivity - Review diagnostics you choose to share (logs, crash reports)
Keys and recovery material
Encryption depends on your keys and recovery material.
- Follow the guidance in /docs/key-management before storing critical information.
- Do not send private keys or recovery material over email or chat.
Sync and sharing
Sync and sharing are designed to preserve encryption boundaries. If you experience issues with sync or invites, see /docs/troubleshooting.
Need help?
- Support: support@ankhora.io
- Security: security@ankhora.io
Response time: within 1 business day.