Challenge
Deliver real zero-knowledge without losing share-by-link ergonomics.
Security · 2024
LockVault
End-to-end encrypted document vault (zero-knowledge)
1 min read · Updated 18 Aug 2026
AES-256-GCM
Chiffrement
Overview
Client-side vault for firms and freelancers: documents encrypted in the browser (WebCrypto, AES-256-GCM) with Argon2id key derivation — the server only ever sees ciphertext. Share-by-link with key in the URL fragment (#), access revocation, and portable encrypted export.\n\nLaravel stack (API + admin), Vue 3 front, S3-compatible object storage. The backend stores only encrypted blobs and non-sensitive metadata.
Solution
Per-file symmetric encryption, wrapped key, URL fragment never sent to the server, vault key rotation.
Outcome
Demonstrable product: verifiable client-side crypto, admin with no access to content.
