Encrypted on your device

VantageVault is designed so files are encrypted in your browser before upload and the server only stores ciphertext.

Protected sessions

Login tokens live in HttpOnly cookies that page JavaScript cannot read, and every login request is checked against an allowed origin.

Two-factor and bot checks

Authenticator-app two-factor, one-time recovery codes, Cloudflare Turnstile and a lockout after repeated wrong codes.

Layered defense

Strict Content-Security-Policy, HSTS, no framing and no inline scripts or styles.

Minimal data

No analytics, advertising trackers or tracking cookies. Accounts store an email address, an ID and a creation date.

Honest by default

If something is down or not configured, the site says so instead of pretending.