Question 1

Where are my encryption keys stored?

Accepted Answer

AMPCrypt operates on a strict zero-knowledge architecture. Your encryption key is derived directly in your browser's RAM memory using PBKDF2/Scrypt algorithm from your passphrase. We do not store, log, or transmit your master keys or passphrases to any server.

Question 2

What happens if I forget my master passphrase?

Accepted Answer

Because we have zero access to your key or plaintext data, we cannot reset your passphrase. However, if you configured Shamir's Secret Sharing (SSS) or set up Security Recovery Questions in the Web Vault beforehand, you can use your share threshold or recovery payload to restore master access.

Question 3

How does Shamir's Secret Sharing (SSS) work in AMPCrypt?

Accepted Answer

SSS splits your master secret into mathematical shares over finite fields. For example, in a 2-of-3 setup, 3 shares are generated, and any 2 shares can reconstruct the original secret. Possessing only 1 share provides 0 bits of information about the master key.

Question 4

Which cloud backends are supported for vault synchronization?

Accepted Answer

AMPCrypt supports standard WebDAV protocol (Nextcloud, ownCloud, Fastmail Files), custom HTTP/S endpoints, and local virtual drives via the Desktop Sync app.

Question 5

Is there a limit on file size during Web Vault encryption?

Accepted Answer

The Web Vault uses streaming Web Workers and 32 KiB chunking. It handles files up to several gigabytes directly inside modern browsers (Chrome, Firefox, Edge, Safari) with zero UI freezing.

How Can We Help You Secure Your Data?

Submit a Support Ticket