Security model

Data is encrypted on the client with AES-256-GCM. Each workspace has a master key wrapped with a key derived from your passphrase using Argon2id. Device keys use X25519.

All traffic between clients and the service uses TLS 1.3. The service only ever receives ciphertext and chunk hashes.