Docs Compare Download Changelog FAQ GitHub

Getting started Quickstart Install on Linux Install on macOS Install on Windows

Keyslots Passphrase keyslots FIDO2 keyslots Post-quantum keyslots TPM 2.0 keyslots Secure Enclave keyslots (macOS)

Desktop GUI Welcome screen Creating a vault Unlocking a vault Browsing files Managing keyslots Panic mode

TUI wizard Wizard walkthrough

CLI reference luksbox create luksbox open luksbox mount luksbox size luksbox enroll luksbox migrate-fido2-slot luksbox revoke luksbox rotate-mvk luksbox upgrade-header luksbox header-backup luksbox header-restore luksbox header-dump luksbox check luksbox extract --tolerate-errors

Operations Recovery Backup strategy Forensics and partial recovery Deniable mode

Security Security architecture Threat model Cryptography Audit reports Security tests & how to help Vulnerability disclosure

Build from source

Tags

Tags

Store sensitive files in the cloud or on shared media without trusting the host. Passphrase, FIDO2, TPM 2.0, macOS Secure Enclave, and hybrid post-quantum keyslots. By Penthertz. Source-available under Apache-2.0.

Product

Download
Documentation
CLI reference
Changelog

Resources

Quickstart
Threat model
Audit reports
FAQ

Project

GitHub
Issues
Security
Penthertz

(c) 2026 Penthertz | Apache-2.0

github docs security contact

Esc