Document storage, done right

Secure, zero-knowledge document storage.

Rkivo is a zero-knowledge document storage system for filing, organizing, syncing, and searching your documents while keeping their contents private and secure.

(We are currently in a closed beta. If you want to participate, fill in the following form.)

Start here Read FAQ

What it is

A vault for documents, built around privacy.

Store and retrieve files

Upload documents from your computer, organize them into folders, and retrieve them later from any device using tags, descriptions, and advanced search.

Zero-knowledge encryption

Your data is fully encrypted using your passphrase. Rkivo cannot access any of it, and only you can decrypt and read your files.

Documents of any kind

Rkivo is not limited to PDFs or office files. You can store text, images, audio, and other file types.

EU-owned, EU-hosted

The service is owned and hosted in the European Union, giving you all the European protections and none of the potential US overreach.

How to use it

Get started

aarch64 (Apple silicon M1 and up)Download

x86_64 (Intel 64-bit)Download

Fix attribute on macOS. Run in Terminal:

cd Downloads/

xattr -dr com.apple.quarantine Rkivo-aarch64.app

When you first open Rkivo, you'll be asked to provide a passphrase and an invite code to register your account and device.

Folder creation wizard

Answer a few questions to set up a recommended folder structure. Completely optional.

Import files

Import files using the app or through the local directory.

Organize

Tag, describe, add your favorites. An organized system just for you.

Common questions

What does zero-knowledge mean here?

Your documents are encrypted with your passphrase before they are stored on the server. Rkivo can sync the encrypted data, but it does not have the key needed to read the contents.

The server is not aware of what files you have, their names, your directory structure, tags, descriptions, or favorites.

What types of files is Rkivo for?

Rkivo works with any file type: text, images, PDFs, audio, video, archives, and even programs.

However, we are aiming to provide the best experience for office files like PDFs, text, and scanned images.

How does Rkivo guarantee security and Zero Knowledge?

For files, Rkivo uses XChaCha20-Poly1305 authenticated encryption with fresh 256-bit per-file keys, random 192-bit nonces, and 128-bit authentication tags.

The vault index is encrypted with the master key, each file key separately wrapped by that master key. Client locally derives from the master key a 256-bit key using Argon2id with a random 128-bit salt (3 iterations, 64 MiB of memory, and 4 lanes).

Communication to server is done over TLS 1.3.

These are the current implementation choices, but they might change in the future. What won't change is our commitment to the best levels of security we can provide.

Is any of it open source?

Parts of the server (vind and berk) are already open source. The client will be open-sourced at a later time.