Wallet login
Enter your Solana address and send a tiny SOL transfer. No passwords, no browser extensions.
0.0001 SOL · ~3s poll
Wallet login. Client-side encryption. Encrypted blobs stored on Cloudflare R2. Your Cold Key never leaves your browser.
Enter your wallet address, then send a micro-payment.
How it works
Decent never sees your files or your Cold Key. You authenticate with your wallet, encrypt locally, and we store opaque blobs.
Enter your Solana address and send a tiny SOL transfer. No passwords, no browser extensions.
0.0001 SOL · ~3s poll
Generate a 24-word Cold Key in your browser. It never leaves your device or our servers.
BIP39 seed · memory only
Each upload gets a unique AES-256-GCM key derived from your Cold Key. Plaintext stays local.
PBKDF2 + HKDF · per file
Only ciphertext is uploaded to Eternal Storage. Download and decrypt whenever you need it.
R2 · 10 MB free · 100 GB / 1 SOL yr
Cold storage encryption
Encryption runs entirely in your browser before upload. We only ever handle scrambled ciphertext — even we can't open your vault.
A 24-word seed generates your vault master key via PBKDF2 (600k iterations). Close the tab and it's gone.
Every file gets its own key via HKDF. A random IV is stored alongside metadata — never the raw key.
Zero knowledge
Lost Cold Key = lost files. That's the tradeoff for true privacy. We don't hold a backup copy.
Readable
Ciphertext
Opaque blob
Encrypt locally → upload ciphertext only
Eternal Storage
After local encryption, files are stored as opaque objects in Cloudflare R2 — durable, S3-compatible storage with no plaintext ever touching our servers.
Your browser
enc:a3f9c2e1…8b4d91ff
Cloudflare R2
Object storage
S3-compatible · encrypted at rest
obj-7f2a
obj-9c1b
obj-4e8d
Download reverses the flow: fetch ciphertext from R2, decrypt locally with your Cold Key. Cloudflare never sees your plaintext.
Sign in with a SOL micro-transaction. No passwords. No approvals.
24-word Cold Key in your browser. Files encrypted before upload.
Permanent encrypted storage on Cloudflare R2. Upload once.
We can't read your files. Ever.
Ciphertext only leaves your device.
Close the tab, vaults lock.